2038b5ac55f698e3479aae06dbe7612e_JaffaCakes118 | Triage

Sharing

General

Target

2038b5ac55f698e3479aae06dbe7612e_JaffaCakes118
Size

8KB
MD5

2038b5ac55f698e3479aae06dbe7612e
SHA1

e5025399d25dbe0afbfc9fc60fe435a63ab46bb0
SHA256

7ff7493cb91b6e0644261ba00016ac4f40f5901249adf6a04c39134ac8c34165
SHA512

084f5c5281b0263bbd9fe577ae4c2cc689e5e12c43cae4d5d73f7e97711aad2e5410855cf6a4689c4dd32d25425c46aabe26913bda81635c0794ebedcaece08e
SSDEEP

96:0IewwvC35aXRcL6o4PldqawDqnC49lbW+/YUuWG:6U5aXRc6fddqaqqn59ZWkuWG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2038b5ac55f698e3479aae06dbe7612e_JaffaCakes118

Files

2038b5ac55f698e3479aae06dbe7612e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4956a7a2427d242d80fc47053fe92b7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
wsprintfA
MessageBoxA
DestroyWindow
CharNextA
CreateWindowExA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA

kernel32

FreeLibrary
GetProcAddress
FormatMessageA
GetCommandLineA
SetErrorMode
LoadLibraryA
ord35
ord37
ExitProcess
GetModuleHandleA
GetStartupInfoA
ord36
GetLastError
lstrcpyA

gdi32

GetStockObject

shell32

ord122

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ