419c81a1c2f562fe98cb4f938831e62d_JaffaCakes118 | Triage

Sharing

General

Target

419c81a1c2f562fe98cb4f938831e62d_JaffaCakes118
Size

16KB
MD5

419c81a1c2f562fe98cb4f938831e62d
SHA1

4e8d806912c52d4bfdc65f34a93fb12d8b0af8d8
SHA256

4df3d6baecb609a8bf9271c2742e1a7443847165ce04bfebbc0a2b01aeda6846
SHA512

f3aa606ea5f000163ca5796adfb405bfcc5c572946308eca41d7e97b2892fa41627eb7d32b5ab372d88a737ea90203cb64af927ab78974b422cadd48d7231cca
SSDEEP

384:NpvDWyUxO4G648JCA2itr77xc18fTrg4t4TFrn:LrdyTGp80ditP7xcuf4O4TFrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
419c81a1c2f562fe98cb4f938831e62d_JaffaCakes118

Files

419c81a1c2f562fe98cb4f938831e62d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcf985e09ff30232664c6f8621cfa24d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
GlobalAddAtomA
SetErrorMode
GetStdHandle
MultiByteToWideChar
LockResource
GetLastError
VirtualProtect
CloseHandle
GlobalFree
RaiseException
GetACP
GetTimeFormatA
Sleep
SizeofResource
LoadLibraryExA
HeapCreate
GetPriorityClass
GlobalUnlock
GlobalDeleteAtom
SetConsoleCP

user32

GetCursorPos
GetClassInfoExA
ReleaseDC
GetClassNameA
BeginPaint
GetActiveWindow
ValidateRect
DrawMenuBar
GetWindow
ShowWindow
DrawEdge
EndPaint
GetParent
GetForegroundWindow
GetMenuItemInfoA
GetWindowTextA
AnyPopup
IsIconic
GetFocus

mprapi

MprAdminUserGetInfo
MprAdminUserClose
MprAdminUserRead
MprAdminUserOpen
MprAdminUserWrite

mapi32

MAPILogonEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ