78455b296aa488d45478e03377c3a3a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78455b296aa488d45478e03377c3a3a5_JaffaCakes118
Size

193KB
MD5

78455b296aa488d45478e03377c3a3a5
SHA1

cb052156d4cf30456a86e64541ae1c0ccfdd7e90
SHA256

3339a59b4feeba1d7e775dc499ba3b989623636b478ff6337e53cc9e90becda6
SHA512

0c1755318013f0084643e15a82da8b0ef86d40bb2f3da9a8eee0b7094a164a9381b1fbae08cfa33c93ef568b5ba6038769e1b32ccad9bd3c55cb94f31efa2bea
SSDEEP

6144:igih2nrIqUBA7h+apOZ5+u9LlwuvEQ2ij1BG03H3T:QKQEQ2ij1BGA3T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78455b296aa488d45478e03377c3a3a5_JaffaCakes118

Files

78455b296aa488d45478e03377c3a3a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

085714cefbb378ee11cfc625cbde86f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateThread
GetProcAddress
GetModuleHandleA
GetLastError
CreateMutexA
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetProcessHeap

user32

GetKeyState
GetWindowLongA
FindWindowA
SetActiveWindow
FindWindowExA
MoveWindow
PostQuitMessage
EndDialog
TranslateMessage
DispatchMessageA
GetMessageA
DialogBoxParamA
ShowWindow
keybd_event
SetForegroundWindow

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ