03b6abb5ee32d1868d6caecfbf0a9961_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03b6abb5ee32d1868d6caecfbf0a9961_JaffaCakes118
Size

61KB
MD5

03b6abb5ee32d1868d6caecfbf0a9961
SHA1

ae0a20f7739268a4650d70a63f17ce1edbfbe3ab
SHA256

b80982ce453018ec24ab512c2e0e37963152ae8caed96856f55831578c4ee500
SHA512

922bd5169f08814c546e3cab7fc59b5676e726cbb45c2cf503daac5f610d4f45ee7eb779030c43d315543d1711215c79a6f6fe512cc3d642ce53b9db5e1985a8
SSDEEP

768:MKtsdS2EvU6MXfgBp0tudleFG1Ooji5o6keJncciyTNzg:DtB2oU6MXfgBWKjwSPJeJccRJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b6abb5ee32d1868d6caecfbf0a9961_JaffaCakes118

Files

03b6abb5ee32d1868d6caecfbf0a9961_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31beb1d0dd62da4f67d2fac01c111df1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontA

comctl32

InitCommonControls

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA

user32

SendMessageA
SetDlgItemTextA
SetWindowTextA
LoadIconA
SendDlgItemMessageA
DialogBoxParamA
EndDialog
GetDlgItemTextA
LoadCursorA

kernel32

SetThreadPriority
Sleep
ResumeThread
ExitThread
CreateThread
lstrlenA
UnmapViewOfFile
SizeofResource
MapViewOfFile
LockResource
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FindResourceA
GetFileSize
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
LoadResource
SuspendThread

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutClose
waveOutRestart

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE