46db73314ed2ad2199514beabbaf2c39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46db73314ed2ad2199514beabbaf2c39_JaffaCakes118
Size

32KB
MD5

46db73314ed2ad2199514beabbaf2c39
SHA1

dcc3ccda25cf515c170612197e1a0a5fb2f5b78d
SHA256

c6313b3e51c5c83d70f1f540646c57e96f02fd441d4ec59fc0b77fe51d93bdb3
SHA512

fecf8c6840897865444f8fb10f619386932ec4de88515052fcd1164305135488c19223a91a746ecd4f43684c2b27b9bc1d96f648712bc79cb7eeaa44302bcbd2
SSDEEP

768:/fdVKrhFDW+yhNQAtdpXPG0nOStpGf/ToUu+ipnVd:XyrhFDpQXXPNoo9nV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46db73314ed2ad2199514beabbaf2c39_JaffaCakes118

Files

46db73314ed2ad2199514beabbaf2c39_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ef8f873f9628ab1b40373f9cbaa34678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetWindowLongA

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ