1b8e8275aacc9a411e645397aa3ab419_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b8e8275aacc9a411e645397aa3ab419_JaffaCakes118
Size

34KB
MD5

1b8e8275aacc9a411e645397aa3ab419
SHA1

6b0a29e75c4e5408da36316c0169ad9f17254a5d
SHA256

960785507089527d9692dea1080b5dcd8ae4281a2739ba57477f67e10b04d773
SHA512

72582539f83f18da8033c4c028948c56d1634780d66ee05ae462522cb61a493deb3134ab9ffde1aa22db229a450877f3dd7186d4e7d91c11417812577496fbce
SSDEEP

768:pFm1jKYFFdsNMhM2ZwE1dgsRRMO7ZZ5VLTgmvI9iI0H:7MFdsNM1ZZbgc/ZtnT2c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8e8275aacc9a411e645397aa3ab419_JaffaCakes118

Files

1b8e8275aacc9a411e645397aa3ab419_JaffaCakes118
.exe windows:47272 windows x86 arch:x86

ca940f19148a83486b94feac8eaa9544

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
CreateThread
CloseHandle
VirtualAlloc
GetACP
GetStartupInfoW
GetACP

user32

EndDialog
SetCapture
IsIconic
PtInRect
EndPaint
LoadImageW
EnableMenuItem
GetFocus
SetWindowTextW
FindWindowW
GetMenu
BeginPaint

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ