feb7d22d1d3e5976beb2025762a20749_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb7d22d1d3e5976beb2025762a20749_JaffaCakes118
Size

31KB
MD5

feb7d22d1d3e5976beb2025762a20749
SHA1

3ed064cb5407eac648d1d54cc6aa26db9b179e98
SHA256

49e9ec515d69bdd5df3746c1fb60a50c6259b7f865f0d28f1fb8753460451695
SHA512

6eaf95d40d77d7c41314d4b333d767aa18be5488468acff08b9bf32bc7d75d1c69e844d7e30b3b4a865eb95b85e933ae424f2fd0be3ce9d5f1bb773112a00ee5
SSDEEP

768:wdguQvaYtDw8wqg3xwDjN5gX1N7R+zIXX+o:w8aYtcFxxUZY1xz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb7d22d1d3e5976beb2025762a20749_JaffaCakes118

Files

feb7d22d1d3e5976beb2025762a20749_JaffaCakes118
.exe windows:4 windows x86 arch:x86

465f73e85c70bac1b98848297fdcc2cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextA
GetWindowTextA
CreateWindowExA
SetFocus
MessageBoxA
DefWindowProcA
PostQuitMessage
DestroyWindow
UnregisterClassA
DispatchMessageA
TranslateMessage
GetMessageA
GetDC
ShowWindow
RegisterClassExA
LoadCursorA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ