4bb288602d625de9b4e88639e0b337c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bb288602d625de9b4e88639e0b337c8_JaffaCakes118
Size

82KB
MD5

4bb288602d625de9b4e88639e0b337c8
SHA1

8199fac3f9d28cb0948347f73521f3b72d6d8f88
SHA256

2db32a43018b07f72a476ce677a2e5980db531600d3e13ceb9321d1e77538cf8
SHA512

26c239e9e0a555320b16403eacf44ad4e9f9ebe9136cd6a67d534edef83d3e1c37ca991594f2965c76b6f929e2f4069ff3df0979a1adbfec111761eda5e9a6ca
SSDEEP

1536:ztMTrI8IYjYp+e1lAvF2Mc4DVxrT3oMMqoGbiXrwoRdG0aCIjCYlIym8AGz8:63FIYjYp+erAvFLnXotSuwud9IjRlIyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bb288602d625de9b4e88639e0b337c8_JaffaCakes118

Files

4bb288602d625de9b4e88639e0b337c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3dc189d70fbe60fd96f48ceea8cdbe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
SendMessageA
MessageBoxA
GetDlgItem
SetFocus
DialogBoxParamA
SetTimer

kernel32

WriteProcessMemory
GetModuleHandleA
CreateProcessA
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE