90df2ee61b9f57b1f9a84fbfe7229956_JaffaCakes118 | Triage

Sharing

General

Target

90df2ee61b9f57b1f9a84fbfe7229956_JaffaCakes118
Size

160KB
MD5

90df2ee61b9f57b1f9a84fbfe7229956
SHA1

2a7661c18a53a803e70f4b240d6cbf65f5da877e
SHA256

e16633a047908f513cbdcb2fb3a11768c0477bd71a47f59ad4fb745b6718016c
SHA512

43c6acefc7fab1fbfc0f28e858b223e6635b13dcf12416893f1f432d51f0da84866d8bb22dea9d9d441258a50f90e66efdff068e5f615622c9c6be6cbe719249
SSDEEP

3072:EwFzDhkZHdMGKhkXaW+/8z4SmwIGkr/VP4qFksnliFvt8AC+c:1FJeSSxtKwxkr/p4qiIi8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90df2ee61b9f57b1f9a84fbfe7229956_JaffaCakes118

Files

90df2ee61b9f57b1f9a84fbfe7229956_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c91e60b194e47dd28bdb29f83de6749e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
lstrcmpA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
WriteConsoleA
lstrlenA
OutputDebugStringA
ReadConsoleA
Sleep
FreeConsole
OutputDebugStringW

user32

GetWindowRect
CreateWindowExA
IsWindow
DefWindowProcA
MessageBoxA
EnableMenuItem
GetWindowLongA
UpdateWindow
GetSysColor
SetWindowLongA
ShowWindow

gdi32

RealizePalette
CreateDCA
GetFontData
TextOutA
SelectPalette
CreateCompatibleDC
StretchBlt
PolyTextOutA
CreateDIBitmap
DeleteObject

comdlg32

GetSaveFileNameA

shell32

SHGetFileInfoA
ShellExecuteA

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ