07088e33963a8e924c67360b7cdaf182_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07088e33963a8e924c67360b7cdaf182_JaffaCakes118
Size

129KB
MD5

07088e33963a8e924c67360b7cdaf182
SHA1

6085e949e1221b5dbab5bc31eda55417118b32f7
SHA256

01a3d03b913e54c82e1e0022a5d28fc152b68c50347b4bc5b9310aaa5bf2e336
SHA512

81d22c9ed30e090e540ddac04d564043c1b8f4ea841c5b7aa2c42ee8a703979bbd73abb37dfd50eb15542956428a7b37882825daea4c5334959540925c018ddd
SSDEEP

3072:RM2TByJ2LJ27d09CXu6O4FahENW8CfNfzaNyR4hBGRe:RvsdW6PFahENWJfNfQyR4h4Re

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07088e33963a8e924c67360b7cdaf182_JaffaCakes118

Files

07088e33963a8e924c67360b7cdaf182_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbe3a2737567cda0ee7c616638a5d096

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
VirtualProtect
ResetEvent
CreateDirectoryA
IsBadReadPtr
IsBadCodePtr
GetSystemInfo
CreateMutexA
GetLastError
WaitForMultipleObjects
SetLastError
VirtualAlloc
CreateEventA
VirtualFree
VirtualQuery
SetEvent
IsBadWritePtr
GetModuleHandleA

user32

PeekMessageA
IsWindowEnabled
UnregisterClassA
SetWindowTextA
CreateWindowExA
PostMessageA
SetFocus
DispatchMessageA
SendMessageA
IsWindow
IsWindowVisible
PostQuitMessage
GetActiveWindow
EndDialog
ShowWindow
GetDesktopWindow

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ