1024472ad80c7b8ceed270ef912209a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1024472ad80c7b8ceed270ef912209a0_JaffaCakes118
Size

91KB
MD5

1024472ad80c7b8ceed270ef912209a0
SHA1

05c4a5aef7500d1208ee564c6f964e0f67167188
SHA256

c8f24f0348096f950fe2df89c5637f01961857694d2088871c368955070a91c2
SHA512

e8df92cc1324826a2ebd40a0769556c276af8300b8179f43bc078a4272d415b9ada7f5c9ff6dda25f1d9df1d637ba66e033faed6e9ba9e5ec72d437d8e6e943f
SSDEEP

1536:NsQzn0TKFuq/Y7di91DEJaE0S3NQz08ytIIPNXESoEh7S2:tnN1IdyiN0S3o0//oT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1024472ad80c7b8ceed270ef912209a0_JaffaCakes118

Files

1024472ad80c7b8ceed270ef912209a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ba22e09a3de9a0ca3f053053cc95228

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DialogBoxParamA

kernel32

GetModuleHandleA
VirtualAlloc
Sleep
CreateThread
ExitProcess
GetSystemTime
RtlMoveMemory

Sections

.text
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ