f4e721f4a05f9661d316351bd8a6785f_JaffaCakes118 | Triage

Sharing

General

Target

f4e721f4a05f9661d316351bd8a6785f_JaffaCakes118
Size

168KB
MD5

f4e721f4a05f9661d316351bd8a6785f
SHA1

a19e6d311224046cc25b68ea3caa9c2e0b0ff72b
SHA256

9dbd3b7a35b37e76ee85dc2ae10546344c7e2b368adb12cdfa68740430a50dd6
SHA512

f766b9812acdcdd93c296db359aa0666f39d8df8e1ccb7733165e7543e8c4eef386e7d15b4e0d542478355a47b2fd9dbfbd8294211d7024d3dadc5ba5df4de2b
SSDEEP

3072:9qUbPZsA6dGqWWxR1Km1RLfsiWWFPmBMkL/2TO8MFl3Miwm3ox+/k896FGyiztrr:9q6PZT6dWWxfKu9fd6MkzedIpVboqn6G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4e721f4a05f9661d316351bd8a6785f_JaffaCakes118

Files

f4e721f4a05f9661d316351bd8a6785f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3897e1e20286239fb1d491caae953388

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleA
EnumResourceTypesW
SetLastError
FreeConsole
Heap32First
TlsGetValue
IsBadReadPtr
CancelIo
ResetEvent
lstrlenA
LoadLibraryExW
GetDiskFreeSpaceExA
IsDebuggerPresent
GetModuleHandleA
GetLastError
GetStdHandle
IsBadStringPtrA
LocalFree
VirtualProtectEx
CloseHandle

user32

GetDlgItemInt
EndDialog
GetMessageA
GetKeyState
CloseWindow
GetDlgItemTextA
GetMessageA
CreateWindowExA
IsIconic
EnumWindows
DialogBoxParamA
CopyImage
GetParent
MessageBoxA

setupapi

IsUserAdmin
MyFree
MyRealloc
MyMalloc
SetupCloseLog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ