308757d392494edc20ff5821ac3b6ce9_JaffaCakes118 | Triage

Sharing

General

Target

308757d392494edc20ff5821ac3b6ce9_JaffaCakes118
Size

80KB
MD5

308757d392494edc20ff5821ac3b6ce9
SHA1

aa4ab595311928c81efc12cf7a145a2dd79656a4
SHA256

b6cef6b08a3d3d09c67dc42ffebe07366f419aa46310cdf0548fb33201c204c8
SHA512

9ce652cac4cbc2e797ccf5e7d05339d35c94ea29023f37f874ff2ce1feea6d9b34c09698455ca6ecdbd148e4419c37292b54cf2057579c4ca462af6c2c3968d4
SSDEEP

768:vyVLn278f+Rd4BDMVAaAF8tXID8wx8z+xSSJqM+fHfB68c8giIUq0YM7X:ADNhFSYfsUnof/s8X3q0d7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
308757d392494edc20ff5821ac3b6ce9_JaffaCakes118

Files

308757d392494edc20ff5821ac3b6ce9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0cdb0de50cba9afaabde63ca775f8abf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindVolumeClose
DeleteCriticalSection
CreateThread
ExitProcess
SetEvent
HeapDestroy
GetLastError
GetDiskFreeSpaceA
GetModuleHandleA
TlsGetValue
VirtualProtect
GetConsoleFontSize
ReleaseMutex
SearchPathA
CloseHandle
GetTickCount
lstrlenA
Sleep
AddAtomA
FindResourceExA

user32

CreateMenu
GetKeyState
DialogBoxParamA
CreateWindowExA
CloseWindow
DragDetect
CopyIcon
DispatchMessageA
GetMessageA
GetScrollBarInfo
CopyImage
EndDialog
EnableWindow
IsIconic

wshbth

WSHNotify
WSHOpenSocket2
WSHJoinLeaf
WSHIoctl
NSPStartup

shell32

FreeIconList

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ