da4b3c9de62323ad7ca637f0523725a4_JaffaCakes118 | Triage

Sharing

General

Target

da4b3c9de62323ad7ca637f0523725a4_JaffaCakes118
Size

55KB
MD5

da4b3c9de62323ad7ca637f0523725a4
SHA1

a0f5f627c4b1bcb03e9566fea8a8705e9b890616
SHA256

6d85e25a4c14e256914f5436264d9ce63b985d20fb004d6c4e507af71927ac11
SHA512

32f66c091c64d4249c57b9b474eb674d85a5f16b31ea0d2ecba740ba927cc8d7ee1acf1763de3c5b904bfa6a18fca3069a6a6024c928954c3d695f46c77a29df
SSDEEP

1536:waVrIbZx2juuehujmU7eQ2DETlhlW85GDBcsF:waKdsjPWuR2DERha1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da4b3c9de62323ad7ca637f0523725a4_JaffaCakes118

Files

da4b3c9de62323ad7ca637f0523725a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88fc5a6acb4204af3d8af9d0cc71153c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA

kernel32

VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE