f27d16242525ea76342719ae51c9c1a3_JaffaCakes118 | Triage

Sharing

General

Target

f27d16242525ea76342719ae51c9c1a3_JaffaCakes118
Size

30KB
MD5

f27d16242525ea76342719ae51c9c1a3
SHA1

7f75c524a5efd5bffa15a3f95ca98b67476cf951
SHA256

6ed586f3f20153207386d5c049773c405ce22b553a8f1830da1f2658e6d3c60a
SHA512

98cef8d79bb60da923784c53435091c23d84363fc23dca84fa6d7576fee3b1c28408d65a2a2cfd56283a02f794353b7fa529c5e577de34d6b5129e69cd1665af
SSDEEP

768:gMRGiEKWYZm7LTk2Rpu9fWWq5gXCH03qBFYJ3es0J:LY/KJYRpu9fWWq5g7qBCgs0J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f27d16242525ea76342719ae51c9c1a3_JaffaCakes118

Files

f27d16242525ea76342719ae51c9c1a3_JaffaCakes118
.exe windows:5 windows

745580b19322f01706d82a92e2b8719f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
ExitProcess

user32

DefWindowProcA
DispatchMessageA
CreateWindowExA
EnumWindows
GetMessageA
MessageBoxA
RegisterClassExA
TranslateMessage
BeginPaint
AdjustWindowRectEx
EndPaint

gdi32

GetStockObject
TextOutA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ