53148d91beef32c7f8b28a6046791c54_JaffaCakes118 | Triage

Sharing

General

Target

53148d91beef32c7f8b28a6046791c54_JaffaCakes118
Size

1.0MB
MD5

53148d91beef32c7f8b28a6046791c54
SHA1

43829fed5e6d0c597ba73f97bc374fee1b04dac6
SHA256

cf45ae9281a4c3801e27c6d6304459ca0260e4d907816fa40aa77e54cf4d02a7
SHA512

a208bcd381ff2feaacdd331b3e2619dbcb70a8094de5745c636d36e0d186ca48ec84c3dae014d315c2a822c15e8ed8bad9eb54b70ba7ba014f7310e10f8e40f6
SSDEEP

24576:NEwLI2q7dnLEWjgboqJeR0P8/yB3y6AR12TthqSfrITFS6EY:m3LhLEWM/v8aB3y6AR12Tt3fr96EY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53148d91beef32c7f8b28a6046791c54_JaffaCakes118

Files

53148d91beef32c7f8b28a6046791c54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1a9f630d9a091f8fe50956ecb21b4e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GlobalAlloc
GetFileSize

user32

GetSysColor
DialogBoxParamA
EndPaint
LoadIconA
DispatchMessageA
SetWindowTextA
DestroyWindow
ScreenToClient

Sections

.text
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1018KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ