f28283f79783118ce4db89e885bd7d29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f28283f79783118ce4db89e885bd7d29_JaffaCakes118
Size

1.0MB
MD5

f28283f79783118ce4db89e885bd7d29
SHA1

db820c24ab43b5363874c0c49f1af86572e46210
SHA256

8f7681e95c606ce10cf7bf716403caf575c8f3db468c000db26225ff5759daf4
SHA512

c049a9be6d391eca5b4075961f43e8af9152bda9c9b59563043b3230dc5ad0abe7081e819abce6d7a3424aa3987ece1d6d28f192e71c91ca376ced5d4e2ccbca
SSDEEP

24576:0bbyxKuKx3xN+J0vbBV3ds87I30He7V7x3NVL37BZT9a:JMx3vQ0f37BuBdND/a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f28283f79783118ce4db89e885bd7d29_JaffaCakes118

Files

f28283f79783118ce4db89e885bd7d29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 164KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 356KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ