0f19313d9a89345f08ac0a68fbb6c47b_JaffaCakes118 | Triage

Sharing

General

Target

0f19313d9a89345f08ac0a68fbb6c47b_JaffaCakes118
Size

302KB
MD5

0f19313d9a89345f08ac0a68fbb6c47b
SHA1

d61c377dc4cca5275dc3627f32d700891a10c8b7
SHA256

23382ce0aa77d1d20e615dceb1d02f294ae382967c193ce54b0e1422e4142415
SHA512

c7b2574dfbfa2509a7879f538f7cbac323bb5ac4453ef8c6543528ce786dbbb550fac0070f90aa75c8a10cf26eb1bdba072e3d2506a3a580b3d559f350c363e8
SSDEEP

6144:tdx6E8RdLcQ3u1lgmhX4N10Y5AE6n/37rD/2bdS+316:tdoEAaQ3ClNX4NyQAE6n/rrD/2bD16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f19313d9a89345f08ac0a68fbb6c47b_JaffaCakes118

Files

0f19313d9a89345f08ac0a68fbb6c47b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9838aa5dfd134a913c1de640cff5a2df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetModuleFileNameA
GetVersionExA
GlobalUnlock
LoadLibraryA
ReleaseMutex
SetLastError
SetThreadPriority
Sleep
TerminateProcess
UnmapViewOfFile

user32

GetDlgItem
MessageBoxA
MessageBoxW
RegisterHotKey
RemovePropW
ScreenToClient
SendMessageCallbackW
SetScrollInfo
SubtractRect
UnionRect

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ