616f06efbfe17d310ce5b7d4f07c3a34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

616f06efbfe17d310ce5b7d4f07c3a34_JaffaCakes118
Size

32KB
MD5

616f06efbfe17d310ce5b7d4f07c3a34
SHA1

205cd488317a2f4f67ed090f29f8788cf5f3198c
SHA256

eb20f31e5238e9de57edd669c9a5784237d27a4e10dc74b0d9b0c45c1c1d54a3
SHA512

5d94c896e9b7566f1759b4e54821f992be87f7be718d92366206004508f2c552910abc7c49fe6c7f13b1634fd756777c5f66d3d4cb447e73d3004d23ca0725b8
SSDEEP

192:Zpeg1atVyEMeOT72whiXSpJLQAPElwokG9:ZgVyEM72wgSnLXclwJG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
616f06efbfe17d310ce5b7d4f07c3a34_JaffaCakes118

Files

616f06efbfe17d310ce5b7d4f07c3a34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a584dd4cf4147ceeef5c695ee94c58ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess

user32

BlockInput
CharPrevExA
CharUpperBuffA
ChildWindowFromPoint
CreateDialogParamA
DrawEdge
DrawTextA
EndDialog
FillRect
GetClassInfoExA
GetClassLongA
GetDC
GetNextDlgGroupItem
GetTopWindow
GetWindowDC
InvalidateRect
OpenInputDesktop
PeekMessageA
RegisterWindowMessageA
SendIMEMessageExA
SendMessageA
SetDlgItemInt
SetFocus
SetShellWindow
SetWindowTextA
ValidateRgn

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 778B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ