37844357e0873473b0fc5fdf0da13698_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37844357e0873473b0fc5fdf0da13698_JaffaCakes118
Size

179KB
MD5

37844357e0873473b0fc5fdf0da13698
SHA1

9e0f646545dfaabc9ed07806849c552b0601c6c5
SHA256

cadd060abf2e67491700ef06f2ba24a0a432c4b18638e33b9cfa338da42f5335
SHA512

36ce36cb7e15286b25843aca4e7d2b6451f460a695eb7d1fd6da7c596bb4777ac2840038473ce2b858d2598e49387056e9150d49ce5f587cd9450798b0a3cdde
SSDEEP

3072:Dk0tgvyUO7tEfGlbmYxE0sZRlbhBzieMA8+3VlthuqBl3tlfpXOTlJmoyMJhjKaR:mxO7eudNsNtBziVRethTlPRUmDeKmw4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37844357e0873473b0fc5fdf0da13698_JaffaCakes118

Files

37844357e0873473b0fc5fdf0da13698_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b685f9ebd4c3d044604741ab8325b01e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject

user32

PostQuitMessage
RegisterClassExA
SendMessageA
SetFocus
MoveWindow
SetWindowLongA
SetWindowWord
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadIconA
LoadCursorA
GetWindowTextA
GetSystemMetrics
GetMessageA
GetClientRect
GetClassNameA
EnumWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
SetForegroundWindow

kernel32

ExitProcess
VirtualProtect
Sleep
RtlZeroMemory
LoadLibraryA
GetModuleHandleA
GetLastError
GetCommandLineA
CreateThread

comctl32

InitCommonControls

msvcrt

atoi

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ