dfbc47457506f1f84d558fbbf2ed5ae8_JaffaCakes118 | Triage

Sharing

General

Target

dfbc47457506f1f84d558fbbf2ed5ae8_JaffaCakes118
Size

141KB
MD5

dfbc47457506f1f84d558fbbf2ed5ae8
SHA1

306923228a4f1f3af2e3a03446c9c29a97b8154f
SHA256

20aae5039a0d9aacc4290b645af3b608c225e40d6640e8fec0170543d2d16678
SHA512

5a144f8b71eaf9fdd72fbf1e0533dfe459e5e7d0ee78ad409ac72babf0b05dab52ae5d9d1ef80389b025da5c84dfa6c2d524667a826939d6ac7fc6fde8ba48d9
SSDEEP

3072:YQ4XIcqkHOZpbrZ3icN5JVn23PW2IQrmequ2I5:NUIcpOZpbrZS6Z23vri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfbc47457506f1f84d558fbbf2ed5ae8_JaffaCakes118

Files

dfbc47457506f1f84d558fbbf2ed5ae8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ea1f4cf450a1dd1d15888a5c8edb588b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

lstrlenA
ExitProcess
WaitForSingleObject
lstrcatA
CreateThread
GetLastError
CreateMutexA
lstrcmpA
lstrcpyA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetCommandLineA
WriteProcessMemory
lstrlenW
GetModuleFileNameW
Sleep
ReadProcessMemory
GetModuleHandleA
GetCurrentProcess
IsDebuggerPresent
AllocConsole
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA
GetProcessHeap
lstrcmpiA

user32

GetMessageA
DialogBoxParamA
MessageBoxW
CallWindowProcA
ShowWindow
SetTimer
TranslateMessage
InsertMenuA
SetWindowLongA
UpdateWindow

gdi32

CreateDCA

comdlg32

ChooseFontA
GetSaveFileNameA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ