4b719197775e55ca3555bee499ae0004_JaffaCakes118 | Triage

Sharing

General

Target

4b719197775e55ca3555bee499ae0004_JaffaCakes118
Size

36KB
MD5

4b719197775e55ca3555bee499ae0004
SHA1

f9778713fd77873c919aee1cf34817ff82955ff1
SHA256

7ced4b6994bb1d999a25dff327108c34e5f8a82a14ac42fc5eef494d973f0ca5
SHA512

a7f138ac3ea48a06310bf5da096f5a0048c954b0776a5b827efed46c5c7bb9c3f73c6f889411e3bda924b6f4c35b61ecf951e4b5f88136c703f5d6c5dd666e3f
SSDEEP

768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578Nkbf:h8wyJnYEOH9ZqDw8h3bzPD2mef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b719197775e55ca3555bee499ae0004_JaffaCakes118

Files

4b719197775e55ca3555bee499ae0004_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c539127eba3e0c62aaacfdb270652c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

MoveWindow
SendMessageA
SetTimer
GetClassWord
wsprintfA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ