170eedd2cc4a4c3f4a94c3e838ad9359_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

170eedd2cc4a4c3f4a94c3e838ad9359_JaffaCakes118
Size

137KB
MD5

170eedd2cc4a4c3f4a94c3e838ad9359
SHA1

0ae2cb00f82ae1d3810acd2757fecc00d2131516
SHA256

37b9bfeb966322a31118f949bcdeca6945929fe75583042502fbe6df7bfee99b
SHA512

5182530ead5241b1d32dd74f686d914035467ede8a375bb7d6d99c3422085d9c6c8a775ab80ce25b49d537f261db2a16e1ffbc2af0c46546f8c719f4140e8742
SSDEEP

3072:2JMvwlXjwDtBJ+7u2tS3jwAJUCjTCgrXCEWu0U1JdJKpz:26YXq74uGS3jPxxu7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
170eedd2cc4a4c3f4a94c3e838ad9359_JaffaCakes118

Files

170eedd2cc4a4c3f4a94c3e838ad9359_JaffaCakes118
.exe windows:5 windows x86 arch:x86

60490a30aa1626c5d13b2f7f489fcfb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Install Path\SendSMS\Main\SubFolder\Includes\InfoApp

Imports

user32

SetWindowPos
MoveWindow
DestroyMenu

kernel32

GetCPInfo
GlobalGetAtomNameA
SetNamedPipeHandleState
EnumResourceTypesA
GetModuleFileNameW
GetLocaleInfoA
GetTempFileNameW
GetLongPathNameW
AddAtomA
GetFileAttributesExA
FindNextFileA
OpenFileMappingA
CreateDirectoryA
GetNumberFormatA
lstrlenW
SetHandleCount
GlobalMemoryStatus

Exports

Exports

?CloseWindowStationCloseWi

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vars4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vptr4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ