d569a1aef12657d935ad35f634783ccd_JaffaCakes118 | Triage

Sharing

General

Target

d569a1aef12657d935ad35f634783ccd_JaffaCakes118
Size

149KB
MD5

d569a1aef12657d935ad35f634783ccd
SHA1

cccc5fa0ad949b5f3d4b3efd51cd553564edfdd9
SHA256

1d93bf57412c80d0690d4f9c4a14e935002b27d82e035ebd4dbc31a758a03f1b
SHA512

824aa81121a361ebc38f4a65f8e5c13ce1454f605d2b8a11c98573e6951fd45770406dfc98af6593f87fe0acf9396f1969fe6d253c7ecd081c97288943a1df90
SSDEEP

3072:N7Apl+zZNRqEdzv3oKBznxMvfw1sPDVbDGT0keMVc:KYzPVYimvFDVfy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d569a1aef12657d935ad35f634783ccd_JaffaCakes118

Files

d569a1aef12657d935ad35f634783ccd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

52d51f240f8dd5f18a9a11d2c7bb0c7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\iwyzRwVClhhs\npPxqzdJle\sHyzcMBurWgRAa\wjrJodMgur.pdb

Imports

msvcrt

realloc
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
localtime

kernel32

LoadLibraryW
SetThreadContext
GetTempFileNameA
DeviceIoControl
SetEvent
GetModuleFileNameA
VerSetConditionMask
GetModuleHandleA

gdi32

CombineRgn
GetObjectW
SaveDC
GetCurrentObject
DPtoLP
GetTextExtentExPointW

shlwapi

StrRChrA

user32

GetKeyNameTextW
DrawTextExW
IsWindow
wsprintfA
GetClassLongA
SendMessageA
GetMenuItemInfoW

Exports

Exports

?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE