08c185accda93b2156a853aa79899ecb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08c185accda93b2156a853aa79899ecb_JaffaCakes118
Size

269KB
MD5

08c185accda93b2156a853aa79899ecb
SHA1

d36fd2d6ba9942f5f822bfb2a49fd72592dc1b0c
SHA256

027da8ba259f754cbb750c082cd06b80b0271c63ffe0b2073051217e82eab0c7
SHA512

b6fabbc13cc02639200f97922b5188ccd71b60e497a71411acc5a52cbe1877353a7035bbda699ba80dcb86401a2beccd4796912a7ad4fd46fdeddb7f6acffd60
SSDEEP

6144:afIN/huDE/6A9RKqp84xNuw+yhGGsy13+eguVrmCY63:afIFhS8pqvwLG5y1OwR/Y63

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08c185accda93b2156a853aa79899ecb_JaffaCakes118

Files

08c185accda93b2156a853aa79899ecb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ae2fa89405eb679f2ed36710e38feb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetTickCount
FreeLibrary

user32

SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
PostMessageA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ