4569902bafaa613e42f810704a232c2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4569902bafaa613e42f810704a232c2e_JaffaCakes118
Size

272KB
MD5

4569902bafaa613e42f810704a232c2e
SHA1

c3b1c7d53ddb401f45ee63ce8b63275d51fa0a5e
SHA256

942dbfc5d92cb5f9d2b513e30b63a84c33c1193fc7d9a03b3fdae96a71db0999
SHA512

e2206c32166888243f5d3643a9b5d8a8a9569a010f6ca8536fcb1712320a812f57d2942dbf31abd1d98aed7db86b3419d9921b8f4a6d778858708c84da010e07
SSDEEP

6144:iggM+tZfrpqsP8rKxR6HnaK7aA4utE2l+A7bov/CP:ZMZfrhQt9tBX/GI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4569902bafaa613e42f810704a232c2e_JaffaCakes118

Files

4569902bafaa613e42f810704a232c2e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0afa162b1ab866f84889de21bb3903e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
GetModuleHandleA
GetTickCount
lstrcmpA
LoadLibraryA
lstrcpyW
lstrcpyA
lstrcatA
GetTempPathA
GetSystemDirectoryA
lstrlenA
GetSystemInfo
HeapFree
HeapAlloc
GetProcessHeap
SleepEx
GetLocalTime
VirtualProtect
GetSystemTime
Sleep
GetLastError
GetFileAttributesA
lstrcpynA
SetLastError
GetCommandLineA
GetWindowsDirectoryA
GetEnvironmentStrings

shlwapi

StrCmpNA
StrChrA
StrToIntA
wnsprintfA
StrChrIA
StrStrA
StrStrIA

user32

MessageBoxA
CharLowerA
SetDlgItemInt
IsDlgButtonChecked
SetFocus
GetDlgItem
EndDialog
SetDlgItemTextA
CharUpperA
GetDlgItemTextA
GetDlgItemInt

Sections

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ