124dc4d72513c3ac0ba85e751fd76676_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

124dc4d72513c3ac0ba85e751fd76676_JaffaCakes118
Size

219KB
MD5

124dc4d72513c3ac0ba85e751fd76676
SHA1

942bb57c153b954622a31b5d2de50b950723b47a
SHA256

cace30f5a7bda4b000726bb1556e500e017d69df7c2c5e206c7c2a5bfeca9e70
SHA512

57bda2779104f7b1bcd7edb7e47edeefc61de733dfceb460623621ed27098a0dd14af5d8c6336d9b54c902558bfe3471b21cc5f9cf3d604ce8970fa0371b7d56
SSDEEP

3072:oArF87DwCIIq7X76iC41oGwoHGRVdkFrYRvqM6Of3qgOUIxRpO7oKzwW/B:HrFMDwluiToRWFkNqc3FHKpO737B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
124dc4d72513c3ac0ba85e751fd76676_JaffaCakes118

Files

124dc4d72513c3ac0ba85e751fd76676_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5af3db5ec6f1dccb224c74c4095641ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Folder of Working Project\ProjectTest

Imports

user32

DrawTextExW
SetRect
ShowWindow
SetCursorPos
SetWindowTextA
LoadIconA
GetDC
IsWindowEnabled
RegisterWindowMessageA
GetScrollPos
GetKeyboardType
SendNotifyMessageW

shlwapi

PathAddExtensionA

kernel32

CreateWaitableTimerA
HeapUnlock
lstrcpynW
SetFilePointer
lstrcmpA
OpenSemaphoreW
CreateEventW

Exports

Exports

_ExitWindowsExExitWindowsEx@0

Sections

.text
Size: 155KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ