729cef5b8528de89d2dbf46031b3983d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

729cef5b8528de89d2dbf46031b3983d_JaffaCakes118
Size

16KB
MD5

729cef5b8528de89d2dbf46031b3983d
SHA1

38ecfae97c4a905c7fce9e2df4df66096d86695a
SHA256

df343fdddac0681e88cf81759387fef9c5a69980806cd8494102b6a199f72221
SHA512

4197376515522083bc3f4a66969892bff34f299bda10b6eecd4d92b5a5063efc2a53353ac08fc12b9baa84c9ce3dab291aa997dad73b3668a879aaa76c366fe8
SSDEEP

384:V8BX+UjRrHCtETwyBdtRakw5dVKuP9NDvZx39uc9:mLjtRMg7MKur3Uc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
729cef5b8528de89d2dbf46031b3983d_JaffaCakes118

Files

729cef5b8528de89d2dbf46031b3983d_JaffaCakes118
.dll windows:4 windows x86 arch:x86

fdb7543c7b885e8a68ab548905ecd8a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ