76a4b873561df80c8234fcecab2d3d71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76a4b873561df80c8234fcecab2d3d71_JaffaCakes118
Size

17KB
MD5

76a4b873561df80c8234fcecab2d3d71
SHA1

cbc076fafaacdd007e24967a2f24fd0d0ece3024
SHA256

e01e12bc18e5fa589ce053b9ac9758df68e878aeaef9e9cbb907a96f4b1a65d6
SHA512

e48d47b94ca4f4877e94fb82eecb4715c4955b197b49f6c2badf0224dc453d742993d1c8c78c526fd1135e03ecf40ef0a787bc83d779d172dd0a5e468c88e233
SSDEEP

192:SngyN7AyckEWQCm/y8Fh/NXgNl/Os6KPdigvAFI52ntMFVE4O+IKBdc2t9D:3yRCkEj/y8F5VgNl/Os+gvxYwVemnx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76a4b873561df80c8234fcecab2d3d71_JaffaCakes118

Files

76a4b873561df80c8234fcecab2d3d71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

955696b2f5f52fc37acfce599c7e5548

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
GetCommandLineA
ExitProcess
GetSystemDirectoryA

user32

DispatchMessageA
GetClientRect
GetMessageA
KillTimer
LoadCursorA
LoadImageA
PostQuitMessage
RegisterClassExA
SetTimer
TranslateMessage
DefWindowProcA
CreateWindowExA
BeginPaint
EndPaint

gdi32

CreateCompatibleDC
DeleteDC
GetObjectA
SelectObject
BitBlt

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ