4277c239f1671e468a0415289956ca50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4277c239f1671e468a0415289956ca50_JaffaCakes118
Size

72KB
MD5

4277c239f1671e468a0415289956ca50
SHA1

36ed0f7cbb0de0ceebc0bf96042b843189a9aa83
SHA256

f8ba635f6d216af18e7f5ae7f49ac28ab71ce66d9705509221dda57c7fcf441a
SHA512

8b953c752dcb6685a0b53d488cfeecc29400507d0a5716c5ea7e8aceaea15c8c2603c6fa855b4221a8f49f84ab234c2099fc40c3254123e1401f43d72093bb1a
SSDEEP

768:BA8DLpa9WpjfS9xe8Bnv6ZZREXZ9ypL0vzJDsOq2YAp7CP:DLpa9IfDYv6ZZipQwrJgOqHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4277c239f1671e468a0415289956ca50_JaffaCakes118

Files

4277c239f1671e468a0415289956ca50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2841f45bf71d1c069b9a0f11b63eb04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemInfo
CreateMutexA
WriteProcessMemory
GetCurrentProcess
GetTimeFormatA
CreateSemaphoreW
LoadLibraryA
SleepEx
CreateDirectoryA
GetTickCount
WriteFile
FoldStringW
GetNumberFormatA
CompareStringA
HeapCreate

ctl3d32

Ctl3dEnabled
Ctl3dCtlColor
Ctl3dGetVer
Ctl3dUnregister
Ctl3dRegister

user32

CreateWindowExW
IsZoomed
SetCursorPos
DialogBoxParamW
GetMessageA
PostMessageA
GetCaretPos
PeekMessageA
ShowWindow
GetWindowTextA
GetWindowLongA
IsWindow
ShowWindow
CharToOemA

themeui

DllCanUnloadNow
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ