79026abc5c88c0f49aa6f34c124c42a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79026abc5c88c0f49aa6f34c124c42a7_JaffaCakes118
Size

7KB
MD5

79026abc5c88c0f49aa6f34c124c42a7
SHA1

6907de8f9a44ad344aadaf910e4d35aa305bda88
SHA256

404d0f120d9531c58f279b7c41c16e06393abb6fe9cf29c58c8629a6c0a06c7f
SHA512

c9a9ad771279c7b71b0103bbde4d75347018620b221f73c991eb6314e8a6deea94bee573816031b3fc1f43b7f07ca29e1efbde1d951a649bf6a8e14bb782431d
SSDEEP

192:9RNOZ/lOBE+AhBb15VxtL2pfv0EjYCJzwfc5MKo7sD6:9RNOZ/lOBE+AhBb15L8pH0ElJzwmMPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79026abc5c88c0f49aa6f34c124c42a7_JaffaCakes118

Files

79026abc5c88c0f49aa6f34c124c42a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0071d8d84f8edec500b94376e06b067

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel
ExtFloodFill
DeleteObject
CreateCompatibleDC
DeleteDC
CreateSolidBrush
SelectObject

user32

MoveWindow
RegisterClassExA
SendMessageA
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadMenuA
LoadIconA
LoadCursorA
GetSystemMetrics
GetSysColor
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
PostQuitMessage

kernel32

GetCommandLineA
GetModuleHandleA
ExitProcess

comctl32

CreateStatusWindowA
InitCommonControls

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

ShellAboutA
DragQueryFileA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE