618b79b719b8d4fab17a7c46153fb53c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

618b79b719b8d4fab17a7c46153fb53c_JaffaCakes118
Size

83KB
MD5

618b79b719b8d4fab17a7c46153fb53c
SHA1

4a7a2741f5855e42135cb282cec7725f2d56ec12
SHA256

3b01d57ead73d5b33c578c79750ba58ee6736a359a77723a15bba8346da3044f
SHA512

afcc9d641c34cd3ff16f0011af48db23a38eb81c01b27a679bbd1e70e9f9cda3bf3a7306c715adb76bc688d863d21fc45e6a0fba7437370a914b79158b72358e
SSDEEP

1536:o6+rI8IYjYp+e1lAvF2Mc4DVxrT3oMMqoGbiXrwoRdG0aCIjCYlIym8AGz8:3MFIYjYp+erAvFLnXotSuwud9IjRlIyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
618b79b719b8d4fab17a7c46153fb53c_JaffaCakes118

Files

618b79b719b8d4fab17a7c46153fb53c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3dc189d70fbe60fd96f48ceea8cdbe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
SendMessageA
MessageBoxA
GetDlgItem
SetFocus
DialogBoxParamA
SetTimer

kernel32

WriteProcessMemory
GetModuleHandleA
CreateProcessA
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE