1607c9499b9d480b88ab4c8ac237785f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1607c9499b9d480b88ab4c8ac237785f_JaffaCakes118
Size

4KB
MD5

1607c9499b9d480b88ab4c8ac237785f
SHA1

268e6a4217e77492c9f79c3a2b300a752dad270d
SHA256

0a0fbe7a27795c646820f64c8c10b966b016415ffd7cf930ceef496d8078bde6
SHA512

95085b2a2d6b0a860da99ed5b3a4de5217596b1f2d2473fb225314e300c7d96ce28207ec104d29df51f5b23d415521856599af28632079ffb41d0cd2730e3aea
SSDEEP

48:SZLTqS5xaW3OZdXLy9r4vL1m9TkD+eBrtboyl1ag0z2BufemCg/17DgJyB:E50W+Gp9IKeBrtboynk2ButC6172

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1607c9499b9d480b88ab4c8ac237785f_JaffaCakes118

Files

1607c9499b9d480b88ab4c8ac237785f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df1564540d6c53e620a6291e1b6bdadf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

user32

ShowWindow
IsDialogMessageA
DispatchMessageA
TranslateMessage
GetMessageA
GetSystemMetrics
RegisterClassExA
LoadCursorA
PostQuitMessage
CreateWindowExA
LoadIconA
MessageBoxA
DestroyWindow
IsWindowVisible
FindWindowA
DefWindowProcA
SetWindowsHookExA
GetWindowThreadProcessId
SendMessageA

kernel32

GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA

imagehlp

MapFileAndCheckSumA

gdi32

GetStockObject

shell32

Shell_NotifyIconA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE