02e6b92409028ec0c08fc46746bdd5ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02e6b92409028ec0c08fc46746bdd5ee_JaffaCakes118
Size

140KB
MD5

02e6b92409028ec0c08fc46746bdd5ee
SHA1

e4b0f7994c5e853173863f4d6094b886e5d9a1e9
SHA256

486e1103fa9936c10c63d4ecc74e9bffd9c33bf198188fc4be9c7f95cc131e4b
SHA512

df1c6e0710e49703106bcb5d10b44ed64167fc3e0943482ce9ebf83c209e7448e65fe3e1058b8ab86f1c524037e83f540fba5f3b41463bca67d97ef81656d055
SSDEEP

3072:5OrSytOwOV8QyfFNXpuK4QJezTxz9G6DtilPicXMd47La:5O2wuG4Q2zPtQpMd47L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e6b92409028ec0c08fc46746bdd5ee_JaffaCakes118

Files

02e6b92409028ec0c08fc46746bdd5ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1d536709ba91cdde77cd828cff69d68

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
CreateProcessW
FindFirstFileW
GetCurrentProcessId
GetFileSize
GetFullPathNameA
GetLocaleInfoW
GetModuleFileNameA
GetStringTypeA
GetSystemInfo
GetSystemTime
GetThreadLocale
HeapAlloc
InterlockedDecrement
LoadLibraryW
LocalAlloc
WriteConsoleA

user32

CreatePopupMenu
CreateWindowExA
DispatchMessageA
GetSysColor
GetWindowThreadProcessId
PostQuitMessage

gdi32

CreateDIBSection
CreateFontIndirectA
CreatePenIndirect
GetDeviceCaps
MoveToEx
SetBkColor
SetWindowExtEx

comctl32

CreatePropertySheetPageW
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_Remove
InitCommonControls
PropertySheetA

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ