f592580e23f6acff36f9788e9c0950f4_JaffaCakes118 | Triage

Sharing

General

Target

f592580e23f6acff36f9788e9c0950f4_JaffaCakes118
Size

242KB
MD5

f592580e23f6acff36f9788e9c0950f4
SHA1

469b65378a0ca8b73bfa2a930392b9dd3bb9a4b7
SHA256

9f943027ece3ae91b1a0b357f98e5062587afef739f968861b321f52da90f783
SHA512

f3c2e1f631e8ed2124fd3c0dcfe4deb90076edbb404ea25edda4ffe1305ecb643bed002f0f77f875858c93f3af241937b5b65294a4baefc4218f8c3f0c55184e
SSDEEP

6144:tI7AtGOOw87glyacITVEUvNG1t7S9uiq2k5iq2kCm:ATOr8bTITVEUFG1NS9uiq2k5iq2kCm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f592580e23f6acff36f9788e9c0950f4_JaffaCakes118

Files

f592580e23f6acff36f9788e9c0950f4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3e28e0e333301d19bb669266c35dde37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeThread
Sleep
SetLastError
GetLastError
GetModuleHandleA
CreateDirectoryA
DeleteFileA
CreateFileA

user32

PostMessageA
wsprintfA
MessageBoxA
SendMessageA
EnumChildWindows
IsWindowEnabled
SetWindowLongA

odbc32

ord12

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ