005b423ea576d0859bc6cc104fde153e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

005b423ea576d0859bc6cc104fde153e_JaffaCakes118
Size

26KB
MD5

005b423ea576d0859bc6cc104fde153e
SHA1

bccc77216cfdcfb891c02675df42f6e20ea1a65f
SHA256

5140a059bad1ef84bfc63560aeb7b2a917999ea90dae1d672a438c87aa58b38a
SHA512

195f8cbd9d555a060ff8676697cb039100aa9ef3a43c175db1243ff06918c9263156775c7a436f9a43ae7c0c4e4f02d2773e368a0deb83c0a7589d1d05aa6f4f
SSDEEP

384:XXTcXFd8r7dGo2MOdcq1BcC6TT6HOOOOOOOOOOOOOOOO3AAAAAACih:zcXs/Mo2MOdvRuTji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
005b423ea576d0859bc6cc104fde153e_JaffaCakes118

Files

005b423ea576d0859bc6cc104fde153e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

855bbd9a3a5eaf3ca98bbdc6c9c2d8ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
LoadAcceleratorsA
TranslateMessage
UpdateWindow
ShowWindow
IsIconic
FindWindowA
LoadStringA
RegisterClassExA
LoadIconA
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
SendMessageA
ReleaseDC
GetDC
TranslateAcceleratorA
DispatchMessageA

kernel32

InitializeCriticalSection
CreateFileA
GetModuleHandleA
GetFileSize
CloseHandle
GetCurrentProcess
GetStartupInfoA
GetLocalTime
WriteFile
GetFileAttributesExA
SleepEx
LoadLibraryA
HeapCreate
HeapAlloc

gdi32

GetTextMetricsA

comctl32

InitCommonControlsEx

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ