db105f09ec93d21c39e6058decf63d75_JaffaCakes118 | Triage

Sharing

General

Target

db105f09ec93d21c39e6058decf63d75_JaffaCakes118
Size

1018KB
MD5

db105f09ec93d21c39e6058decf63d75
SHA1

33b4b831d02d5472fd4992196fb41d00609b472e
SHA256

1ad264e8c448e123afacb92d27d13a757ba847cb22adc274f7ba1625496c5af5
SHA512

624a41d4d41ab6f615629e6e2f72e58182890b4b4e31f693881db9a8e637d09db5bfe919181024c16e1ce8a00e280064bbc00053780b7a60c8ec638aefbbca2b
SSDEEP

24576:z9VtQRdL3xfMiMwhrnoy8ECrvJKYYjJrY1d:z9Vc30iM+Doy7AIYYxKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db105f09ec93d21c39e6058decf63d75_JaffaCakes118

Files

db105f09ec93d21c39e6058decf63d75_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2a5b5ec6258a80eb0b234c638b0c82d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadContext
VirtualProtectEx
FreeLibrary
GetCommandLineA
GetLastError
ExitThread
GetStartupInfoA

user32

PeekMessageA
SendDlgItemMessageA

Exports

Exports

Tncigaqi
Hixfjovi

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA21
Size: 3KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1004KB - Virtual size: 1008KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enoli
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ