68e64fa14b38dab571da8e86f57c13be_JaffaCakes118 | Triage

Sharing

General

Target

68e64fa14b38dab571da8e86f57c13be_JaffaCakes118
Size

48KB
MD5

68e64fa14b38dab571da8e86f57c13be
SHA1

b632d81f19f0774075d32fed5f5ab806d3444dd9
SHA256

93d28e202c2e242f5a37ae6e403990f82bbccdf5e4488c86a3d5aa8bd01556f0
SHA512

4d31f7f4114b0e7909ee4dd75c95a81dbe87855262b66073c279a5a862c89a09cfebeeb127edc2068209fd28ba6af5cd734b3f8a368bff0b4597f417b23cc9df
SSDEEP

768:t5oMDryYAOSSJVH0FnR4KTmfT9ujj4/BFJ3eS2BJT2XtTrXsXfIxQxw3YgJE9Icc:zo5RuJVH0dpf4/0SOAXZXsXQuxwHJZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68e64fa14b38dab571da8e86f57c13be_JaffaCakes118

Files

68e64fa14b38dab571da8e86f57c13be_JaffaCakes118
.exe windows:1 windows x86 arch:x86

92b8b9b6e84a2982b5251af4ff06625f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetClientRect
GetMessageA
LoadCursorA
LoadIconA
LoadMenuA
MessageBoxA
MoveWindow
PostQuitMessage
RegisterClassA
SendMessageA
SetFocus
TranslateMessage

gdi32

CreateFontA
DeleteObject

advapi32

EnumServicesStatusA
GetCurrentHwProfileA
GetTrusteeNameA
GetUserNameA

Sections

.bss
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE