7039c7a43f6b15ba76bf7cceed339894_JaffaCakes118 | Triage

Sharing

General

Target

7039c7a43f6b15ba76bf7cceed339894_JaffaCakes118
Size

269KB
MD5

7039c7a43f6b15ba76bf7cceed339894
SHA1

666a54a1140808e2c18eb4e8587f7301324a1061
SHA256

c0da0b8636b49e26a717fde9597739f6679c53aaf2741437bfb2e3440bc42f1b
SHA512

9b48af941f29ad427d579192bb8a747bcfdedc7de4b885a67ed24dbbe466a93e73a9ef621319387f5dda8fb8f088cf54f45de3e2ce9e3eafcdc94d46b79596a8
SSDEEP

6144:TOmjkv4gyX60QT9HNfY9edmxCosAGBfK:TOekg7XfQprRqGBfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7039c7a43f6b15ba76bf7cceed339894_JaffaCakes118

Files

7039c7a43f6b15ba76bf7cceed339894_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ae2fa89405eb679f2ed36710e38feb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetTickCount
FreeLibrary

user32

SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
PostMessageA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ