15f9d9f0cbc4c9fa9b5be8a3602cac97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f9d9f0cbc4c9fa9b5be8a3602cac97_JaffaCakes118
Size

12KB
MD5

15f9d9f0cbc4c9fa9b5be8a3602cac97
SHA1

5bc6cfd7ef068c2c99a44c93f132783c6a37ff9b
SHA256

624937d3151931d2ff11cf8ae7077d90ebc0920b7a715bd6453b0a79653af28e
SHA512

bdebc886bef67f47b72053b589818ddfc949bd9414b3076bf13453c826f024fe016483de53b298f889ce138568bd91dc2207fc4ee86be3796d6d1f157087add9
SSDEEP

384:lOSz1oxddf7bjVkiJska9t3Abx5aCUXiTj0sh/Wi7L:lOSzmDaMKg5rUXiTj0sh/Wi7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f9d9f0cbc4c9fa9b5be8a3602cac97_JaffaCakes118

Files

15f9d9f0cbc4c9fa9b5be8a3602cac97_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6296a22dfa994416921faaa6d21c2156

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
EndPaint

gdi32

CreateEllipticRgn
SetMapMode
DeleteObject
SetBkMode

ole32

CoGetMalloc
OleSetContainedObject

oleaut32

GetActiveObject

kernel32

GetFileAttributesExA
DeleteCriticalSection
HeapAlloc
EnterCriticalSection
InitializeCriticalSection
HeapFree
LeaveCriticalSection
GetACP
HeapCreate
QueryPerformanceFrequency

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE