de4dc3000dc54d373b2d60d4b3cd7422_JaffaCakes118 | Triage

Sharing

General

Target

de4dc3000dc54d373b2d60d4b3cd7422_JaffaCakes118
Size

345KB
MD5

de4dc3000dc54d373b2d60d4b3cd7422
SHA1

159c266bf805eaad122f67803073adf2c549fa5e
SHA256

fb35dfa24ed69130899a99552952615eba9c073bc24a43fb55558f98b4c35e1e
SHA512

1582d39e831013a5de843aa512a3835cf822cf8cb0c568b7f6c50f704ef95575943b4086cd1dbca43e9e74b83f4c444ba6a5c3ad5a5e879ce5df1a731bfd7c67
SSDEEP

6144:zNrP0KT5VBzqanSFW9RhTr3/siVZByLFEjrfCLQoYW2Tq+lfeommnHj:zz5VB2anDR/zBieKLQor+NeVmD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4dc3000dc54d373b2d60d4b3cd7422_JaffaCakes118

Files

de4dc3000dc54d373b2d60d4b3cd7422_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6c6b779e47ac623d8e6a9b331145e1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetDiskFreeSpaceExA
EnumResourceTypesW
CancelIo
ResetEvent
Heap32First
TlsGetValue
IsBadReadPtr
GetModuleHandleA
LocalFree
FreeConsole
VirtualProtect
IsBadStringPtrA
LoadLibraryExW
CloseHandle
GetConsoleTitleA
GetCommandLineA
GetLastError
SetLastError
GetStdHandle

user32

GetKeyState
DragDetect
GetMessageA
CloseWindow
DispatchMessageA
GetUpdateRect
DialogBoxParamA
IsIconic
CreateWindowExA
EnableWindow
GetScrollBarInfo
CreateMenu
CopyImage
MessageBoxA

hlink

HlinkCreateFromData
HlinkCreateFromString
HlinkResolveShortcut
HlinkOnNavigate
HlinkClone

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ