d9bedb02126786df352660aeb9b2c069_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9bedb02126786df352660aeb9b2c069_JaffaCakes118
Size

90KB
MD5

d9bedb02126786df352660aeb9b2c069
SHA1

98a13354ffe9a0c94390e9f485a3e2851c10863f
SHA256

17bd1509e333ddba402d58fb690336286ac22b3ef9bd9702b500d0d7154e4488
SHA512

d659a2e16649b712c339b82cd46e2eab8c249a80bfe39014103d954f637287febe8bcaef0f74e578ca8b683d339bf6f1e9385102369217a6eee690ee80441c5d
SSDEEP

1536:C+ouy0NBMXIEGVThyLeNs0Z1sMJut17ubs8EU6AQVzNCqwk4OjTaX:nounNBMYTVds0Z1sW4msLAQpNEOf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9bedb02126786df352660aeb9b2c069_JaffaCakes118

Files

d9bedb02126786df352660aeb9b2c069_JaffaCakes118
.exe windows:1 windows x86 arch:x86

77b797c5e3f165760b94c6f617cad688

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlen
VirtualAlloc
VirtualFree
GetModuleHandleA
EnumUILanguagesA
GetProcAddress
ExitProcess

user32

DialogBoxParamA
GetDlgItemTextA

gdi32

AbortDoc
CloseMetaFile
ColorCorrectPalette

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE