4104e88ba7ca6b944eb2c6754f9f95e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4104e88ba7ca6b944eb2c6754f9f95e5_JaffaCakes118
Size

26KB
MD5

4104e88ba7ca6b944eb2c6754f9f95e5
SHA1

ba1143055caf6d37cbd6e90936ccfcd35f010d51
SHA256

1b8506a0d4342b7673ca982f2add540142c3c1a8bdc4c29ac9d1799ce8a15ac1
SHA512

a407beb09894153b85c317bb9630ac21e814e694ae8c7e42c5d382a9dcea009e5e1ac6eb0da97801dd68788910d0f2b0b2e89a088973b21d29f5498471c6170c
SSDEEP

384:v9wNIGOd9sTdrVzXR2XF/SeKz+LLd/zFMx7dnG9YOlZZNXyzWjVQxWmKzaWg:vGed9IH4XF/DLd/zFMx7YR/9pCsmVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4104e88ba7ca6b944eb2c6754f9f95e5_JaffaCakes118

Files

4104e88ba7ca6b944eb2c6754f9f95e5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ef8f873f9628ab1b40373f9cbaa34678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetWindowLongA

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE