5cb96e61235795225a786ad2397a218c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cb96e61235795225a786ad2397a218c_JaffaCakes118
Size

49KB
MD5

5cb96e61235795225a786ad2397a218c
SHA1

7488c246d7b2d8d768bfff37cc26ccfc833e9a16
SHA256

dd6c0629b2f1a518048538fa8a65f3f3283bf58dcdbadbe8094662699ebc7848
SHA512

b9026051a36eb2211e6a4ae5405e76a594484245ee3cf19db4f24985b30b82e0c65f99dd83e8fb2fe48c4e89f847851e00c9ef6680ff41726b17cfd8bf446e3b
SSDEEP

768:o48BmaVRdHa+eP+3fUb/b44/gn9X+f1wSu24bpfhqAp433JFaLigap0CI:o48msqPMfUn44/QkwJvpGHJFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cb96e61235795225a786ad2397a218c_JaffaCakes118

Files

5cb96e61235795225a786ad2397a218c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf7579ad438428f2763df66909ada183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
SendDlgItemMessageA
EnumDesktopsA
EndDialog
DialogBoxParamA

kernel32

VirtualProtect
Sleep
RtlZeroMemory
CreateThread
ExitProcess
GetLastError
GetModuleHandleA
LoadLibraryA

comctl32

InitCommonControlsEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE