556c1b12b428f27c28872251757bcfa9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

556c1b12b428f27c28872251757bcfa9_JaffaCakes118
Size

14KB
MD5

556c1b12b428f27c28872251757bcfa9
SHA1

616ccd49cc4e698e53f9e8687176dc6bd994aee6
SHA256

57613a5bb7c09f5376abc207bc0a65f4531685e4c7b237a70524072bb486509f
SHA512

4fdc1bbd79129a504c6beb011186d6dba493ed66fd7367c8e2b34bd253c5480dbec364968f113d14be37a13185125d7ae02ef179ace2a04dbd9622562480bebb
SSDEEP

192:GTU+oG60EgTheJ1efMOV4QDR5NIa1+Ew7LyH7BsTq+xfx7GEnu92E:6U+oG60EgojXOV4M5pw7E75E5pnI2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
556c1b12b428f27c28872251757bcfa9_JaffaCakes118

Files

556c1b12b428f27c28872251757bcfa9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e15c4f3d3b5a630b08669aa413037d52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
SendMessageA
RedrawWindow
MessageBoxA
LoadBitmapA
InsertMenuA
EndDialog
DialogBoxParamA
CreatePopupMenu

kernel32

_lwrite
SetCurrentDirectoryA
OpenMutexA
LockResource
LoadResource
CloseHandle
CreateFileA
ExitProcess
ExitThread
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GlobalFindAtomA
LoadLibraryA

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 770B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ