614010998f80832dc8827dee31597298_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

614010998f80832dc8827dee31597298_JaffaCakes118
Size

5KB
MD5

614010998f80832dc8827dee31597298
SHA1

49ff3aac882bf3d8068d9a7175b6a38e38883f80
SHA256

af707bebc2ba8259d94939c6a6b7669c8a08017b41e993232caf52f0576f023b
SHA512

20f7198ce1bb7114657617324805849448317a30fcf6e1fb8395ffb931a96ec287c71795ef140ede81e7e83c79901b3a81e0655d9f3e81199c2a9b7a96034e74
SSDEEP

48:y9CNQlDsslw6RLlq2TxxKp6xqELxqEWkvTFQjV2oBc8l9D:8z5mybplWXVrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
614010998f80832dc8827dee31597298_JaffaCakes118

Files

614010998f80832dc8827dee31597298_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2f70c28d2fc243c25b219f67c633da7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
PostQuitMessage
RegisterClassExA
LoadMenuA
LoadCursorA
LoadIconA
ShowWindow
TranslateMessage
UpdateWindow
GetSystemMetrics
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
SendMessageA
SetMenu

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA
GetCommandLineA
FreeLibrary
ExitProcess

Sections

.text
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE