297ede14cf2afdf4d1c00fafedf743ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

297ede14cf2afdf4d1c00fafedf743ae_JaffaCakes118
Size

93KB
MD5

297ede14cf2afdf4d1c00fafedf743ae
SHA1

848a7c04b849b513fad98a3b4e96e0524df7d495
SHA256

e3e09b3f06b3773641b54f647beafd3887be21ec9d187e179f9c7d5d0dee51fc
SHA512

d9b9107e1184a8a5563a7c6bb16f71db2e8b3a8c6b6996ad98512fa69fb9bae7d25715f57c0c562158949417e44ee5df000d5b4597209d461105eb78d48bb71a
SSDEEP

1536:To5pmiN1ncpJGtdGignUkoKlZUh+Rsz9cEpnw/8VcAoMx6mPNqDUGKn6wdnz7kJl:47N1ncbGjGRUoZk+RCnw/8VhzXPNrGIO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
297ede14cf2afdf4d1c00fafedf743ae_JaffaCakes118

Files

297ede14cf2afdf4d1c00fafedf743ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51243a8eae0ca60f538dfebe75dd1f66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3

kernel32

GetCommandLineA
GetProcessHeap
lstrlenA
ExitProcess
WaitForSingleObject
CreateThread
GetLastError
CreateMutexA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
IsDebuggerPresent
lstrcmpiA
HeapFree
GetEnvironmentVariableA
HeapAlloc
GetStartupInfoA

user32

GetMessageA
UpdateWindow
ShowWindow
DefWindowProcA
TranslateMessage
RegisterClassExA
DialogBoxParamA
MessageBoxW
MessageBoxA
CreateWindowExA
DispatchMessageA

shell32

SHGetFileInfoA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ