696043105976481c415b7850b641db69_JaffaCakes118 | Triage

Sharing

General

Target

696043105976481c415b7850b641db69_JaffaCakes118
Size

15KB
MD5

696043105976481c415b7850b641db69
SHA1

a9f38b346a946bbdc3fe5562a3e4842a98869173
SHA256

7759929e8faf90755b1f2937ce6eba89cfd64ec91f0a4f80563c04358241967c
SHA512

4272c321886ee456af80a16a207b09186d1c3fc532086b9207553cae2391c0b16551c58e35c4149a6bde69ec6bb108be8172e18128232ecc3110790ffadaa892
SSDEEP

384:+r2BZb7zoJT6jRGYjKuRx6Peim8dTw48BA:jzcJT6jh5yi4Tt8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
696043105976481c415b7850b641db69_JaffaCakes118

Files

696043105976481c415b7850b641db69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67cc0c37d1beb4c7b795d92d2a3f964c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassA
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ