de1a4b8cbe35fb02ee567856130bf553_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de1a4b8cbe35fb02ee567856130bf553_JaffaCakes118
Size

16KB
MD5

de1a4b8cbe35fb02ee567856130bf553
SHA1

1ee4f0b0b6829cc8f67f84f950a25fc91fb555bf
SHA256

1caa849ae3d3f5dc5aa6a771275afc178e1a38d05a74430fa04c79898b564ccb
SHA512

8a4f6424ad2c8905dfce8564d5f5c270d97b55b4d05557e14ec94237259287389d895435e2e5239f467bcef728f95b8533b8cb5d178a703147a42a777a14dd4e
SSDEEP

384:n2+qGRP/lx44YEKVfQnXuhuvAuhQ9uuhjhuuuh9:2+qGRP/lx35U2XuhuvAuhQ9uuhjhuuuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1a4b8cbe35fb02ee567856130bf553_JaffaCakes118

Files

de1a4b8cbe35fb02ee567856130bf553_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7df0b0fad24b17c7f71555496439c732

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DispatchMessageA
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
LoadCursorA
PostMessageA
GetKeyboardState
PostQuitMessage
GetClassLongA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
HeapFree
SetFilePointer
WriteFile
ReadFile
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ