25bfc423c0d1291671c32767df5d0860_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25bfc423c0d1291671c32767df5d0860_JaffaCakes118
Size

693KB
MD5

25bfc423c0d1291671c32767df5d0860
SHA1

cf3a629ab1bfbd701953532fafb22ab6adc3cb98
SHA256

dce0a88af0c37edfd1df896d1bc6161b581fe4cec620322ed5150593284de7db
SHA512

7178d7a8fc4c7760e7c78a00f8bdf2bbc674cc15ed4d6e42746f650ce4d0bba80897adea98ce9f0c1c1ef957b7463d445b7d5743b4727d0240e5c68e34812d34
SSDEEP

12288:QN7Gs7DNhu2hPbGyvUcRpv+VVydBGfc+IeZJfrOvC5pAK4mnUZqg71gi+Adl27f8:yf7D5hbGAvGRZtzLKPCALsD+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25bfc423c0d1291671c32767df5d0860_JaffaCakes118

Files

25bfc423c0d1291671c32767df5d0860_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e45bd3b158713ec76012b80ce2bf111

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
Sleep
GetTickCount
lstrcatA
CreateEventA
GetFileSize
GlobalFree
FreeLibrary
GetCommandLineA
lstrcpyA
GetLastError
CloseHandle
GlobalAlloc
GetStartupInfoA
LocalFree
GetVersionExA
LocalAlloc
GetModuleHandleA

msvcrt

__set_app_type
exit
_initterm
_except_handler3
__CxxFrameHandler
_acmdln
toupper
_adjust_fdiv
wcstoul
memmove
wcslen
__p__commode
__setusermatherr
wcschr
_c_exit
__p__fmode

user32

SetWindowTextA
ShowWindow
EndDialog
GetWindowRect
CreateWindowExA
EndPaint
LoadIconA
DefWindowProcA
ScreenToClient
GetSysColor
PostQuitMessage
MessageBoxA
SetFocus

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 686KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ