180a646fafd9642ca1f2f8bd62ca5937_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

180a646fafd9642ca1f2f8bd62ca5937_JaffaCakes118
Size

36KB
MD5

180a646fafd9642ca1f2f8bd62ca5937
SHA1

b7b5042af98b726a1db1c451c59013c2d5930240
SHA256

4bc4555cc3bce8a87480e6f6304b98c113348358776a3816dd38067561f64d8a
SHA512

f418dfe2828e26b01b219935c3d03383031f9f079c71aeba663e1e0c473aeac200b9f4aabf2248f464de6b5003f43ac6d2b40be1c2b31f8e6b6a05978092cd26
SSDEEP

768:QATJxFQM1+Bw8JrV4UYW50z4C6AXTzM7WyjiTI:QA3cBw8JrydM7W7k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
180a646fafd9642ca1f2f8bd62ca5937_JaffaCakes118

Files

180a646fafd9642ca1f2f8bd62ca5937_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b59568103553c4542f7431444f7aeca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

SetTimer
wsprintfA
KillTimer
SendMessageA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ