5ec103e11d047cfec2e413a27a542969_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ec103e11d047cfec2e413a27a542969_JaffaCakes118
Size

134KB
MD5

5ec103e11d047cfec2e413a27a542969
SHA1

798d75198a13bf41466e6661c9880f815cfe1194
SHA256

d2f5b8bb58859dd3f6b862b0833d61a7318ad644e61eda5c984dd8e32df4d13c
SHA512

80340db8695e3457d24086b5740f222f7dc81660c8a6f859ed56b02eb4252df55cd7548c923f1312ac70459a20fb43d48dfab2a0928c997fef411fb0f6ae9ab8
SSDEEP

1536:BHHIYpEAyW0CzBiBXJMiOTygeoasc4F/EXCRHdGvv8TRJ6m+drh:RdpPliPMi9FtrCRiv2J6m+/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ec103e11d047cfec2e413a27a542969_JaffaCakes118

Files

5ec103e11d047cfec2e413a27a542969_JaffaCakes118
.exe windows:4 windows x86 arch:x86

71411def9c77f166cb46b28a8e8b33c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControls
CreateStatusWindowA

user32

SetTimer
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
TranslateMessage
KillTimer
GetMessageA
GetCursorPos
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadCursorA

kernel32

lstrcatA
WriteProcessMemory
VirtualAllocEx
Sleep
SizeofResource
SetThreadContext
RtlZeroMemory
ResumeThread
LockResource
LoadResource
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetModuleHandleA
GetThreadContext

ntdll

ZwUnmapViewOfSection

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE