dec310d4ce712c641e5557cc2e5bd31d_JaffaCakes118 | Triage

Sharing

General

Target

dec310d4ce712c641e5557cc2e5bd31d_JaffaCakes118
Size

64KB
MD5

dec310d4ce712c641e5557cc2e5bd31d
SHA1

06b6df608ec4b3468917d9012ac965345f65b9f3
SHA256

c5775738f92164e0d07b9437d250ae4b8dba08912ee67f9fb00ac09afd3aae53
SHA512

4dea056a34489c023f93495eaecfc8ced8663bf74a269569830f9acf310e8a5b3bf5e234355a8ea420439b739b018f6f7d23a3129813ac823a78cc9b62b7cb30
SSDEEP

1536:uWXCSnHHJplN/daSDEk0r4YADstQO9uLFr67lx4dl7WZpijPG:rX7HNN/1/cRADstQO9cFOLclyLia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dec310d4ce712c641e5557cc2e5bd31d_JaffaCakes118

Files

dec310d4ce712c641e5557cc2e5bd31d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

758b5de35c507ef2e6bb0d61dac243e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetCommandLineA
CreateConsoleScreenBuffer
GetProcAddress
InterlockedExchangeAdd
ExitProcess
GetEnvironmentVariableA
SetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
RtlUnwind

user32

RegisterClassExA
LoadIconA
LoadCursorA
CreateWindowExA
GetMessageA
GetDlgItem
DialogBoxParamA

shell32

SHChangeNotify

shlwapi

StrChrIA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE