15642796a6371de9c6ca17e06b6ce8c7_JaffaCakes118 | Triage

Sharing

General

Target

15642796a6371de9c6ca17e06b6ce8c7_JaffaCakes118
Size

35KB
MD5

15642796a6371de9c6ca17e06b6ce8c7
SHA1

e997d8ac5f70ad98bfbf3b4a08d9f09569136ea7
SHA256

d155d3b6665172d9041dfc7450820891e4c8df07471bbbde5417d4e8743e95d7
SHA512

251468c80ef0ef0c2e5aa36291ce9820e6a39a01bff8c64ec39fd26f4ae98dce624c51b6e56edd3fcf64ec4bac81c01b57d66f77ed1c53d92603be7e570fbf1d
SSDEEP

768:tY6Q6Hqmz56nyDVaiI78DISIsEsCBaSyXGCGHJdFV4O:26Q4zRDAi2gl7HCngGTHY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15642796a6371de9c6ca17e06b6ce8c7_JaffaCakes118

Files

15642796a6371de9c6ca17e06b6ce8c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3dc189d70fbe60fd96f48ceea8cdbe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
SendMessageA
MessageBoxA
GetDlgItem
SetFocus
DialogBoxParamA
SetTimer

kernel32

WriteProcessMemory
GetModuleHandleA
CreateProcessA
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE