e8ca7961fb076288eb45f4bc36a39002_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8ca7961fb076288eb45f4bc36a39002_JaffaCakes118
Size

27KB
MD5

e8ca7961fb076288eb45f4bc36a39002
SHA1

f79424a9f964b54be119a5ffb8f20d2d0bda9be8
SHA256

d9ab5756805595645efb9916ca9c345aedc3c99244385b4371cd693a8f47c1ee
SHA512

3c19725f8afc71452b1c29153e3ce74d71ea56d56a10b9d80a536b5e943fe2489d5275e2acd86732419192835ae9688d6f2a8401f4d4013bbe254a7a9179ce85
SSDEEP

384:boOEojW/znj1PcpJ6vWddlbjdI+CfkZC1CQB5AfjkC5j8lzDSDugiv4EN6:bvsznj1tibjRCfkECdfjbjKKDutv4s6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8ca7961fb076288eb45f4bc36a39002_JaffaCakes118

Files

e8ca7961fb076288eb45f4bc36a39002_JaffaCakes118
.exe windows:4 windows x86 arch:x86

504411fa583b3c54342e6878c01d9e81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
GetMessageA
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ