f292e6ce82340e4d4ce4b34f4e483943_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f292e6ce82340e4d4ce4b34f4e483943_JaffaCakes118
Size

4KB
MD5

f292e6ce82340e4d4ce4b34f4e483943
SHA1

a3b77e3bf92ddc5654aef4ddb1b6222c5c3f448e
SHA256

e8b39a07dc48872340a7a81f07e6cad8a31c2f886b8c5198e5b79b44fd171df9
SHA512

9c007905f71f2ce59056a7d4c82cbebbfde495c215527c2883a55337bfc6d2979d12e4bf5f803a019351c4f491a0bf407df69e6a93409bac6f55147c5527113d
SSDEEP

48:Zvtth6Q//r7S68S+PByE9YMyeil3PA7bzeciHPk3dABaP9Fra:Z1PN//q68S+Lzilo/epvua8Fr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f292e6ce82340e4d4ce4b34f4e483943_JaffaCakes118

Files

f292e6ce82340e4d4ce4b34f4e483943_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5ae27f9d700588c36445de1e0cd2446d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateFileA
ReadFile
CloseHandle
GetTickCount
ExitProcess

user32

RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
SetCursor
MessageBoxA
PostQuitMessage
WaitMessage

ddraw

DirectDrawCreate

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 286KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ