1530269a743b5d52b3f6f30a29385052_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1530269a743b5d52b3f6f30a29385052_JaffaCakes118
Size

28KB
MD5

1530269a743b5d52b3f6f30a29385052
SHA1

fb12a3acbd43196e5ca3753889a5451257618516
SHA256

2e62b1a300dc832f44d4ebdc35d9f3a58c06ec8030ad55642938a5bad83281db
SHA512

35a1a14e2af35d3a60738a76ab6e24a43c5d7867b0825bc2a7f8d94c8ba0d1cfef47b1a735f7c116320f83ed8baf9f0f4d778853113a3f5687cbb88f6893ea32
SSDEEP

384:cys/dVT9iXaCaGS3XMNF0TPB5e6c0zckE/Tbj195S:cldVT9iX3aGeXMNFEPB5e6c0ZE/Tl94

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1530269a743b5d52b3f6f30a29385052_JaffaCakes118

Files

1530269a743b5d52b3f6f30a29385052_JaffaCakes118
.exe windows:4 windows x86 arch:x86

da59bdb6085f4d0a24fa568e2cab037f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Sleep
GetModuleHandleA
GetStartupInfoA

user32

FindWindowA
PostQuitMessage
DefWindowProcA
CreateWindowExA
GetForegroundWindow
ShowWindow
GetMessageA
RegisterClassExA

msvcrt

time
_controlfp
_except_handler3
__set_app_type
fopen
fwrite
fclose
sprintf
rand
__CxxFrameHandler
__p__fmode
atol
??3@YAXPAX@Z
strchr
srand
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ