d9d90a33082b4168560bc346ed752b28_JaffaCakes118 | Triage

Sharing

General

Target

d9d90a33082b4168560bc346ed752b28_JaffaCakes118
Size

429KB
MD5

d9d90a33082b4168560bc346ed752b28
SHA1

50da948425fb5f2346cb78a3e682629040b47335
SHA256

83a40ed092e1f33971a95a99a882f247550fb6a7b64f231ce0351dd0ef49e60e
SHA512

49dabbb192a56a15f1b1303c9ee1d2d2128f02b411d33f9397d3509889938a13cabde4c99e1a9b75b01ce4d93e499715e7b013d10d5f7f21be4dabd79f30e201
SSDEEP

12288:wmedy5zVs2996lpxZ5ECzU7Ra2bY/C+RF20WcOILb3QpAy26a6+eCaL5:w5Kzi2GlXbE+U7Ra2d+Rg0WcOIPQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9d90a33082b4168560bc346ed752b28_JaffaCakes118

Files

d9d90a33082b4168560bc346ed752b28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

73b398188262cf81f682a2d8613639b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
IsBadStringPtrA
GetModuleHandleA
GetStdHandle
ResumeThread
CreateEventA
LocalFree
GetConsoleCP
FindClose
lstrlenA
GlobalLock
FreeEnvironmentStringsA
GetSystemTime
GetLastError
GetACP
OpenMutexA
IsBadReadPtr
VirtualProtectEx
LoadLibraryExA

user32

EndDialog
DialogBoxParamA
GetDlgItemTextA
CheckMenuItem
GetSubMenu
RedrawWindow
SetFocus
ClipCursor
CreateWindowExA
GetMessageA
GetMessageA
IsIconic
IsMenu
DrawIconEx

wldap32

ldap_delete
ldap_add
cldap_open
ldap_compare
ldap_unbind

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ