4546bf67e9ba33d6facb224269c1d8eb_JaffaCakes118 | Triage

Sharing

General

Target

4546bf67e9ba33d6facb224269c1d8eb_JaffaCakes118
Size

5KB
MD5

4546bf67e9ba33d6facb224269c1d8eb
SHA1

10e57ebbbec3045a9af84444dcd711ad055bcc4a
SHA256

99f3f9272a3ab049a69cc1cb20eca97fb2d2ad9a859a0b466b1efeee7297c294
SHA512

9fd1f360eb75efa48172dda729e0700797bcb34d8b955142f74e3a7eaf3aa7ca6bcd76c908306c6c7ceb4f9abc0a3a371943ac7e4ccd2ab3c0d6e63f17b5494b
SSDEEP

48:637M/wYmESEuGwySIWJ7pH2Rtxa6sEbHHH1/dT/mN/AefBf/3K:Sg/Sm+H2IEbV1TSYcBfS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4546bf67e9ba33d6facb224269c1d8eb_JaffaCakes118

Files

4546bf67e9ba33d6facb224269c1d8eb_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e20bca902ffdbb36b54732b514f607c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RtlUnwind

user32

SetDlgItemTextA
GetDlgItemTextA
SendDlgItemMessageA
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
RegisterClassExA
PostQuitMessage
ShowWindow
CreateWindowExA
DefWindowProcA

gdi32

GetStockObject

crtdll

__GetMainArgs
exit
memset
raise
signal
strchr
strcpy
strlen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 280B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE