171609c0cbe9116ac2eb16f111f80392_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

171609c0cbe9116ac2eb16f111f80392_JaffaCakes118
Size

22KB
MD5

171609c0cbe9116ac2eb16f111f80392
SHA1

250a9282dd655b275027d6ba7ddef38ff1761c9a
SHA256

69a813604d12a02f998b71bae4ce97da5becb1c2f9c724a56e43d8e451436e2e
SHA512

4a19e0eb4e087e0e22f56ac5215a89f63003a23a7cdf149584913bcf946eccae9c7f11ef8ef3dd3449f286bf620e8dcc72e7d449ca54c98a32b8c8cd79e52e3e
SSDEEP

384:guRlMpuKIPxjvMvpY3jl4AAIHxyVf7jaiIGWXJd8UdmIv:gcDKKdvyyzlYIRyVfjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
171609c0cbe9116ac2eb16f111f80392_JaffaCakes118

Files

171609c0cbe9116ac2eb16f111f80392_JaffaCakes118
.exe windows:4 windows x86 arch:x86

74a6cce7d9ef4aff16a0d60523fbf5dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetLastError
GetModuleHandleA
GetCommandLineA
ExitProcess
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
RtlZeroMemory
RtlMoveMemory
CreateFileA
WriteFile
CloseHandle
TerminateProcess
GetSystemDirectoryA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
FlushFileBuffers
OpenFile

user32

GetDlgItem
SetFocus
EndDialog
SendMessageA
SetDlgItemTextA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ