158567b2592a7f81d18e9c3c5d5bd01f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

158567b2592a7f81d18e9c3c5d5bd01f_JaffaCakes118
Size

8KB
MD5

158567b2592a7f81d18e9c3c5d5bd01f
SHA1

24ef6ee34f8fe201b85deb179980e9d9c873f6a0
SHA256

9f442d430e2821b2d691d85dc45baa554f8709d17ea8e213063b42f7bf7f6b28
SHA512

ec4c8a366751f31ad2c807ff4a39bb5e8246306bee0013157a800d1f00ff2911ded60f1fa73b2a39a40400e174ec6d5d68ddcd6c4a1b0118b397b8b0835800ca
SSDEEP

96:YYPBAZ98rf5tcgbPLYkuw9lsu03NP25U0R4TjMaNnsn5vQumfAKbFmarass7JX/5:uMhyoLPZ96P3NP2RVa2QuWFh+X/5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158567b2592a7f81d18e9c3c5d5bd01f_JaffaCakes118

Files

158567b2592a7f81d18e9c3c5d5bd01f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11c04389c381dd926fac64f8ec709a16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
SetWindowLongA
LoadCursorA
UpdateWindow
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
SetFocus
GetSystemMetrics
GetSysColor
GetMessageA
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
ShowWindow
BeginPaint
TranslateMessage

kernel32

lstrlenA
lstrcatA
WinExec
SetCurrentDirectoryA
GetModuleHandleA
GetCurrentDirectoryA
GetCommandLineA
ExitProcess

gdi32

SelectObject
MoveToEx
LineTo
DeleteObject
CreatePen

shell32

ShellAboutA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE