7324fafad600db0a3fd04af785fec9a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7324fafad600db0a3fd04af785fec9a0_JaffaCakes118
Size

20KB
MD5

7324fafad600db0a3fd04af785fec9a0
SHA1

42f90c8d20794287acb4cb9e4612b279152aca54
SHA256

66d671ff51c7e3a01f261236d479e1715402bd010bea126eacf6bb393a4a23f8
SHA512

a685fc9ef8f8ae5ac1151063a43e15663429226e2c26c5a845fed2bd25d22258e85b0e5f78f4e7245c5480c8079b9e959ac12c8fe021e1204fa37bb6a242bebc
SSDEEP

192:SVb3RV163B7vHtJUhctVoY5XBZeAf7AlC+wWgaA0UxC8nUtLK5N5J:UP2U4oY5XBZe0AC+wWgarhu95F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7324fafad600db0a3fd04af785fec9a0_JaffaCakes118

Files

7324fafad600db0a3fd04af785fec9a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd7b859f05f0a6fc90edae991f7ebd76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxIndirectParamW
GetDlgItem
RegisterClassExW
CreateWindowExW
GetCursorPos
MessageBoxW
ShowWindow
UpdateWindow
DestroyCursor
CreateCursor
SendMessageW
ShowCursor

kernel32

CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ