39d56a1fce53db2ac5500546f4e25034_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39d56a1fce53db2ac5500546f4e25034_JaffaCakes118
Size

397KB
MD5

39d56a1fce53db2ac5500546f4e25034
SHA1

328daaa57036d1c11e69985920e15627b2869b0c
SHA256

945dd12f9f08e9922e34be33a6cb426610b2d902971ed5cfb034801d12a29a6b
SHA512

f34349e82c482bf90c42db9dec70c9338e92979b5d28b52f993b8c7670ff9547aa8984c8b3470745240ec2a49cf12c5a06da639b7bca72e16553f884c16b0478
SSDEEP

12288:l1l8+o3o5fYhVneF2LR8K9EHTHh7tvnLUTgpcI3:7l8+J5fYDnpdB6HDhpvnAI3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39d56a1fce53db2ac5500546f4e25034_JaffaCakes118

Files

39d56a1fce53db2ac5500546f4e25034_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 24KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 356KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ