ed45da18908ef8c7e549a81215f11651_JaffaCakes118 | Triage

Sharing

General

Target

ed45da18908ef8c7e549a81215f11651_JaffaCakes118
Size

357KB
MD5

ed45da18908ef8c7e549a81215f11651
SHA1

e84ed5171be667dd147f8da6d204ebbe83dec53e
SHA256

13ae046a1e6f434748f51ea419d715ff9f95932e2d7c058d94f4762a96bd847f
SHA512

57d836f9d45bdf91ee8dd181f594a8967155cda093d61c18c0078d2354f27cb4923c9f33299ac0b6a527dbd0b0603f8e099ec77b8a8449ec239e0c5053af3cf6
SSDEEP

6144:qmEwLQsKrcTTp1G9XFBKwStAHytYNW2OkP9J4ScHkscshHG8/3bg0:qOLm2G7fStmN4239J4STscshHU0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed45da18908ef8c7e549a81215f11651_JaffaCakes118

Files

ed45da18908ef8c7e549a81215f11651_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01d50ae0f73f05f05537fea80e5ea072

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeConsole
GetConsoleTitleA
EnumResourceTypesW
CancelIo
VirtualProtectEx
LocalFree
IsDebuggerPresent
CreateMutexA
ResetEvent
GetModuleHandleA
IsBadStringPtrA
lstrlenA
LoadLibraryExW
Heap32First
GetStdHandle
SetLastError
TlsGetValue
IsBadReadPtr
CloseHandle
GetLastError

user32

GetMessageA
CopyImage
CloseWindow
GetMessageA
GetKeyState
DialogBoxParamA
CreateWindowExA
GetParent
GetDlgItemInt
EnumWindows
GetDlgItemTextA
IsIconic
EndDialog
MessageBoxA

setupapi

IsUserAdmin
MyMalloc
MyFree
MyRealloc
SetupCloseLog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ