dcc16df9b30544e24cc31e73855b2562_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dcc16df9b30544e24cc31e73855b2562_JaffaCakes118
Size

15KB
MD5

dcc16df9b30544e24cc31e73855b2562
SHA1

30a0a14a897128e49c6c84d1bff5ba0e26e737a9
SHA256

55c972c5c9bf1b01561f566914e738cb320d34aec12b77b02e1f8ec025360b69
SHA512

572694029fb82a4914af7d36f2e7adc1f5657b6241c8a5a3d9d357f86e3f5015910f080a08e040d48afccaa77622aa2c127f86e3ef7109a46c8f130e41cfcede
SSDEEP

192:cUNQ9YmRXIen9UAOIRkxQap3QMBHdBamBF31xMXjYTxt1NNTVBB3o:cUNxmRXUA7RkxrhTrLF37MMltbnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcc16df9b30544e24cc31e73855b2562_JaffaCakes118

Files

dcc16df9b30544e24cc31e73855b2562_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbeefe2a198dc0ec5e187de8f2430bcc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
SetWindowLongA
SendMessageA
RedrawWindow
MessageBoxA
LockWindowUpdate
InsertMenuA
InSendMessage
GetForegroundWindow
GetDC
EndDialog
DialogBoxParamA
CreatePopupMenu

kernel32

lstrlenA
_lwrite
OpenMutexA
LockResource
LoadResource
LoadLibraryA
GetProcessVersion
GetProcAddress
CloseHandle
CreateFileA
ExitProcess
ExitThread
GetCurrentProcessId

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

SHGetFolderPathA

gdi32

GetKerningPairsA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ