29ce8421b6df32afe7133bb8c6c7c023_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29ce8421b6df32afe7133bb8c6c7c023_JaffaCakes118
Size

14KB
MD5

29ce8421b6df32afe7133bb8c6c7c023
SHA1

49403e402ab77b207c9105306484b331ffa34189
SHA256

3bb819b3cdedf3f9dc47e8eb41070e660e4daac01c1a744348ade947757766b6
SHA512

b000c1c9e25ac995529d09dcc942eca3f89256c9142ca7fe0d8816ebb373d2f75459d17c5f72841aa3c4245e0db7198b7eb5258df9c31787b795d791930d43d3
SSDEEP

384:n2+qGRP/lx44YEKVfQnXuhuYX4uuhGuh3uuhvug9:2+qGRP/lx35U2XuhuYX4uuhGuh3uuhvD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29ce8421b6df32afe7133bb8c6c7c023_JaffaCakes118

Files

29ce8421b6df32afe7133bb8c6c7c023_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7df0b0fad24b17c7f71555496439c732

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DispatchMessageA
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
LoadCursorA
PostMessageA
GetKeyboardState
PostQuitMessage
GetClassLongA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
HeapFree
SetFilePointer
WriteFile
ReadFile
CreateFileA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ