f0018dfe4ae8d84a2d035fd15e624ad2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0018dfe4ae8d84a2d035fd15e624ad2_JaffaCakes118
Size

89KB
MD5

f0018dfe4ae8d84a2d035fd15e624ad2
SHA1

ff6314d88a569fb493f58a6e4d511d1843868536
SHA256

1d854f4aab7a720ebc08f6900bc2571eb01977354a8238589d0d1a8bec37b4cb
SHA512

6631ddd8b50c2a4ba8557ae72b6ff017904d9e47e088e401335905f78a922d1ffa6f531035188b5245ed8fc0980a6424b618ac5864ff5b726265aa5c29d3f8ee
SSDEEP

768:prlwEWyKoYsdmroyxsUybBWEPTcCdxk5Cw6wVB46p1oUwqBXGQTB:ppsyKBAdpBWEPTcCdxkZPZ1oUwqBXzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0018dfe4ae8d84a2d035fd15e624ad2_JaffaCakes118

Files

f0018dfe4ae8d84a2d035fd15e624ad2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c12d8fe95b8a4163ac2077d8c26dcfd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
WriteFile
CopyFileA
ReadFile
SetFilePointer
CloseHandle
GetFileSize
lstrlenA
GetLastError
CreateFileA
lstrcpyA
GetModuleHandleA
GetStartupInfoA

user32

DialogBoxParamA
LoadIconA
IsDlgButtonChecked
SetDlgItemTextA
SendMessageA
wsprintfA
SetWindowTextA
CheckDlgButton
EndDialog
MessageBoxA

comdlg32

GetOpenFileNameA

msvcrt

exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
free
malloc
atoi
_exit
_XcptFilter
__getmainargs
_acmdln

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ