731d17da53966050020d6b32e27f00cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

731d17da53966050020d6b32e27f00cd_JaffaCakes118
Size

8KB
MD5

731d17da53966050020d6b32e27f00cd
SHA1

9ccd200eab90ef96ce109fd0b03299a9e6a15d41
SHA256

911382f9d4687e9892374ba501477e5574ed30a8527f6cf08a47fe6300860c14
SHA512

dd9a7afbbdb21d498bd93c0b8a2431a0c457cc4a0ccf8a0ba4dd7148c3f69e48ecc62f0e0be2addc89beed854e0b568359097b4928648fb3fdd3e8a4bb856558
SSDEEP

192:SLHKBCJ04rPWuM+5aSXxFZWRekOl+QzzT1JwacvJp:KwChrOx+PXx2zObzzRJw77

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
731d17da53966050020d6b32e27f00cd_JaffaCakes118

Files

731d17da53966050020d6b32e27f00cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fd3eb92f2df5aa3142dd90b3a391a42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
TranslateMessage
ShowWindow
SetMenu
SendMessageA
RegisterClassExA
PostQuitMessage
LoadMenuA
LoadIconA
LoadCursorA
GetSystemMetrics
GetSysColor
GetMessageA
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
wsprintfA

kernel32

WriteFile
UnmapViewOfFile
SetFilePointer
ReadFile
MapViewOfFile
GlobalFree
GlobalAlloc
GetModuleHandleA
GetFileSize
GetCommandLineA
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA

gdi32

TextOutA
SetTextColor
SetBkColor
SelectObject
MoveToEx
LineTo
DeleteObject
CreatePen
CreateFontA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 31B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE