0df0299809a50a2888009216889972d0_JaffaCakes118 | Triage

Sharing

General

Target

0df0299809a50a2888009216889972d0_JaffaCakes118
Size

68KB
MD5

0df0299809a50a2888009216889972d0
SHA1

4cb746ef00081573ab12b72447a89db1b8ecf939
SHA256

8c5bedf20910cafec24cdd333a90261af336e0b607ce65571223b2914771b969
SHA512

8483f0a39e6b6bd3b51692e68453143ac64197012d44460c50179665cba1cd79906c7189f0025bd0849357a27fa22c6bc8e80234d5b432cc4cf5d01bfde4ff55
SSDEEP

768:oAygo5ebZ7ok3FZ9ypL0vzJDsOq2YAp7CP:K19k7QwrJgOqHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df0299809a50a2888009216889972d0_JaffaCakes118

Files

0df0299809a50a2888009216889972d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2841f45bf71d1c069b9a0f11b63eb04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
CreateMutexA
WriteProcessMemory
GetCurrentProcess
GetTimeFormatA
CreateSemaphoreW
LoadLibraryA
SleepEx
CreateDirectoryA
GetTickCount
WriteFile
FoldStringW
GetNumberFormatA
CompareStringA
HeapCreate

ctl3d32

Ctl3dEnabled
Ctl3dCtlColor
Ctl3dGetVer
Ctl3dUnregister
Ctl3dRegister

user32

CreateWindowExW
IsZoomed
SetCursorPos
DialogBoxParamW
GetMessageA
PostMessageA
GetCaretPos
PeekMessageA
ShowWindow
GetWindowTextA
GetWindowLongA
IsWindow
ShowWindow
CharToOemA

themeui

DllCanUnloadNow
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ