03f1ee090e790d2d11468876c49b2075_JaffaCakes118 | Triage

Sharing

General

Target

03f1ee090e790d2d11468876c49b2075_JaffaCakes118
Size

269KB
MD5

03f1ee090e790d2d11468876c49b2075
SHA1

73cc61bd4a8048038860a1f6a3be479a43bb1306
SHA256

ab2c7f1a4bd7055e01044b7f6e7410be3c11014ff332b604e3962d5b059a3b14
SHA512

b2efb19d5ce0d23515bcf819a728231805e35428136ae35c63af4c3358bc7d34daf7b5c616f8550dc933fc5dc81563b584cca07a9cca1084de014ce5621487bb
SSDEEP

6144:vtakJ9InD+OALT4NpGmL40eMB3TiSjH5EYfhRE9MNzXNy4G+:A2fgSx00bYf/RNzXYY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03f1ee090e790d2d11468876c49b2075_JaffaCakes118

Files

03f1ee090e790d2d11468876c49b2075_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43edd1bfa25e466049a7793ea3a08073

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextA
MessageBoxA
GetThreadDesktop
GetActiveWindow
IsCharAlphaA
GetScrollInfo
EnumWindows
EnumDisplaySettingsA
SetDlgItemTextA
DialogBoxParamA
GetWindowThreadProcessId

ole32

CoGetCallerTID

comctl32

ord17

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

GetTimeFormatA
HeapDestroy
GetSystemDefaultLangID
GetLocalTime
LocalAlloc
LocalFree
IsBadReadPtr
IsBadWritePtr
GetDateFormatA
GetUserDefaultLangID
SetFileAttributesA
GetTickCount
HeapFree
GetProcAddress
FreeLibrary
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
HeapAlloc
ExitProcess
GetModuleHandleA
HeapCreate
GetHandleInformation

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ