785d6754d8ef2f9b718e6b5a6073e168_JaffaCakes118 | Triage

Sharing

General

Target

785d6754d8ef2f9b718e6b5a6073e168_JaffaCakes118
Size

269KB
MD5

785d6754d8ef2f9b718e6b5a6073e168
SHA1

032fe4d12a99fb5c9f5c55182fd7bb814c6efe43
SHA256

9ab098045e23462b4e0285ae48f73d00afa1cc7b1eba0d6dafa204e7da185a57
SHA512

26aba9d13e14989dd968ae76f249ac6410dd12b8cdb9b07d489000202b2dbb422e23f6658bd6304affa1e863e9c3214af5540c51d2771cc6c3d25c06e1e523bc
SSDEEP

6144:WfIN/huDE/6A9RKqp84xNuw+yhGGsy13+eguVrmCY6:WfIFhS8pqvwLG5y1OwR/Y6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
785d6754d8ef2f9b718e6b5a6073e168_JaffaCakes118

Files

785d6754d8ef2f9b718e6b5a6073e168_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ae2fa89405eb679f2ed36710e38feb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetTickCount
FreeLibrary

user32

SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcA
PostMessageA
RegisterClassExA
DispatchMessageA
TranslateMessage
GetMessageA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ