0115d787708da7cc5c9c298569b68650_JaffaCakes118 | Triage

Sharing

General

Target

0115d787708da7cc5c9c298569b68650_JaffaCakes118
Size

91KB
MD5

0115d787708da7cc5c9c298569b68650
SHA1

4f2aa3103c750e80f0145da098b74f8dacbb72ed
SHA256

fad6946706f90c2e29ce190b6d6869c75645503fc723bdc378278655804b6e93
SHA512

d4c3680ad68a4182808cdd1f5764177d562dd4f3002134ebee00844ffd79d439cb53f59fcaeb2a075993659cb9bf80597658e09a4f60ec30e962320cb520f040
SSDEEP

1536:krjsWqQrmG0EeBiRiZ5QnbpVkIj+7tLyqS9iMtYvi1uqliHFM/xDS7iuyGcXZ0:kvhF6GnRiupVkIjK7i5tYqcMxp00Z0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0115d787708da7cc5c9c298569b68650_JaffaCakes118

Files

0115d787708da7cc5c9c298569b68650_JaffaCakes118
.exe windows:5 windows x86 arch:x86

982775d72096e8ee8ce3bba70025ff08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
LoadCursorA
IsWindowVisible
BeginPaint
WindowFromPoint
EndPaint
CreateWindowExA
RegisterClassExW
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
LoadIconA

gdi32

CreateFontIndirectA
DeleteObject
GetStockObject
GetTextColor

ole32

CoInitialize

kernel32

GetEnvironmentVariableA
LoadLibraryA
GetProcAddress
HeapCreate
GetEnvironmentStrings
FreeLibrary
InitializeCriticalSection
EnterCriticalSection
GetStartupInfoA
LeaveCriticalSection
GetTickCount
GetLastError
SetFileAttributesA
HeapAlloc
DeleteCriticalSection
CompareStringA

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ