70824cabc9710c45f9ed0898d454b620_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70824cabc9710c45f9ed0898d454b620_JaffaCakes118
Size

32KB
MD5

70824cabc9710c45f9ed0898d454b620
SHA1

6f4df5775d7903677ffd190bc70d42b3ac8ef251
SHA256

1fc113e641a4e564453a5942b2b0bbb03a62e4876393ce4a832456b3702462d0
SHA512

e18dfaf0cbf09f8fef0a354fc50e5072c1046404e29dc2756461a91488c25fdb914d61e6c1b00aa1e873f5e6b5960f3828bb2de9d0ba31e910c02c4237a588f0
SSDEEP

384:ZgVyEM72wgSnLXclwJGFKzs5DbLRrNl2hYgt/2:JEGgE30PRHiYgt/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70824cabc9710c45f9ed0898d454b620_JaffaCakes118

Files

70824cabc9710c45f9ed0898d454b620_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a584dd4cf4147ceeef5c695ee94c58ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess

user32

BlockInput
CharPrevExA
CharUpperBuffA
ChildWindowFromPoint
CreateDialogParamA
DrawEdge
DrawTextA
EndDialog
FillRect
GetClassInfoExA
GetClassLongA
GetDC
GetNextDlgGroupItem
GetTopWindow
GetWindowDC
InvalidateRect
OpenInputDesktop
PeekMessageA
RegisterWindowMessageA
SendIMEMessageExA
SendMessageA
SetDlgItemInt
SetFocus
SetShellWindow
SetWindowTextA
ValidateRgn

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 778B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ