38fa4a185bf3835aec21101ba837cfb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38fa4a185bf3835aec21101ba837cfb9_JaffaCakes118
Size

339KB
MD5

38fa4a185bf3835aec21101ba837cfb9
SHA1

76f1885998b248aa5db5f9f5c346a86a232460aa
SHA256

bcf4d064a84e833a8d0d6f69807f0ab8f92a1426b63cf1f4e20d72b3d87ec033
SHA512

7ac967cf4845530cc4e6a58e407f088f5cd69e80c367b1f9bb952b0ffa198ab92676882a3b23c76639b84003383fdabb74467fa233b2ec490971c91c07653bc1
SSDEEP

6144:Q8S7TWRHSHFkzpLvdILpZlsarCr3LZgxOeNKmDSL+JG8PrQF6ARwpEoKN5W:6TRSlLvq/rCUZEmjE8PrQyEzfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38fa4a185bf3835aec21101ba837cfb9_JaffaCakes118

Files

38fa4a185bf3835aec21101ba837cfb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b2b8434f92f24d24a9d4fab85fbd1e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
LoadLibraryExW
SetLastError
LocalFree
VirtualProtectEx
GetModuleHandleA
GetStdHandle
FreeConsole
CancelIo
CloseHandle
EnumResourceTypesW
GlobalLock
Heap32First
IsBadReadPtr
CreateMutexA
GetConsoleTitleA
lstrlenA
GetLastError
ResetEvent
IsDebuggerPresent

user32

GetKeyState
EnumWindows
CopyImage
EndDialog
GetDlgItemTextA
CloseWindow
GetParent
DialogBoxParamA
CreateWindowExA
GetMessageA
IsIconic
GetMessageA
GetDlgItemInt
MessageBoxA

setupapi

MyRealloc
MyMalloc
SetupCloseLog
IsUserAdmin
MyFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ