dd60dd438ffb3373355962ca1b4d47dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd60dd438ffb3373355962ca1b4d47dd_JaffaCakes118
Size

24KB
MD5

dd60dd438ffb3373355962ca1b4d47dd
SHA1

34f34419288385b979371ad0beb1dff86662845a
SHA256

e05530724951c317003bea927120f354ac2f83ff087570e5271c79189b9ff84d
SHA512

75538cc235e9f010b7e236e165a1bedba744db3d15c9845502ff7753892c7d4817f88fe9c6c7c6f861973bd5573687f381b64bee5dbcb3283a71518904f76348
SSDEEP

192:Bjd06apRNEoqGAhplJDpLW3I6kMoSldf:dd06apRNEnVDpLjvWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd60dd438ffb3373355962ca1b4d47dd_JaffaCakes118

Files

dd60dd438ffb3373355962ca1b4d47dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

134c7dbce64e405feea9a22a1f514fa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA
HeapAlloc
HeapReAlloc
HeapFree
InterlockedDecrement
lstrlenA
GetStartupInfoA
GetCurrentThreadId
EnterCriticalSection
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
GetModuleHandleA

user32

DefWindowProcA
CharNextA
LoadStringA
DestroyWindow

ole32

CoUninitialize
CoInitialize

comctl32

InitCommonControlsEx

shlwapi

SHSetValueA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ