14346106e18b8b9c4a515c1f0f6edc04_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14346106e18b8b9c4a515c1f0f6edc04_JaffaCakes118
Size

27KB
MD5

14346106e18b8b9c4a515c1f0f6edc04
SHA1

9c774afd837689ac9ff71b68c88ab6c88e82cdf8
SHA256

06d707c945ccebf87986d49f899f25d64d783afd76bf8400feeede4ac8cc2619
SHA512

d7d66b409c4d50a544459059ebd45d55e144f6131eea88a0e1dbdd1c7d4c674e42b319d11e6e1bb74a6213a0f5b5c70d4ddf264341604eef91555408dd2c7654
SSDEEP

384:7b2UnMfM9r7gY7qNCp6SGowpgbghwcRZl1oy+j3ob:7vMfMRgY7qNQxw5KcRT+j4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14346106e18b8b9c4a515c1f0f6edc04_JaffaCakes118

Files

14346106e18b8b9c4a515c1f0f6edc04_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5117d622be470a3e593399de53d0d5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
LocalAlloc
CreateEventA
GetCommandLineA
Sleep
GetVersion
GetLastError

user32

DialogBoxParamA
SetWindowTextA
EndPaint
ScreenToClient
GetSysColor
EndDialog

msvcrt

exit
__p__commode
_acmdln
_adjust_fdiv
wcstoul
__CxxFrameHandler
__p__fmode
memmove
_exit
__setusermatherr

gdi32

GetTextExtentPoint32A
CreateFontIndirectA
PatBlt
GetBkColor
SelectObject

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1013B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ