1b4fbaed15a32ef6c2907a1f916373c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b4fbaed15a32ef6c2907a1f916373c4_JaffaCakes118
Size

31KB
MD5

1b4fbaed15a32ef6c2907a1f916373c4
SHA1

0374f78bfebf09b6ae9ddc8f9673241c44493fe8
SHA256

fc497c3f409af5d63340c82a4e58ac3e6f653be8b50aad5494b20c890499122b
SHA512

bc268d9329cc0df14cf73225ba1b5ff97ced280355a4a66fb8faae8a788d6767a986cf2d9b0879c045cc52c2429a9b963b25eee44727e80a0e1f3a915ffa1f40
SSDEEP

768:hGL3XiAyvZxG/nRbBKdzBmr9JOzvD59Tbtax:gLCFXknRezB8Q7TRg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b4fbaed15a32ef6c2907a1f916373c4_JaffaCakes118

Files

1b4fbaed15a32ef6c2907a1f916373c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40a6fa6f37e0658be3a475d7e284538a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
Sleep
ExitProcess

user32

BeginPaint
BlockInput
CharLowerA
CharUpperA
CloseWindowStation
CreateDialogParamA
CreateWindowExA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetProcessWindowStation
GetTopWindow
MessageBoxA
OpenWindowStationA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ