820a9c8942ef165ab07626bac6fb0c67_JaffaCakes118 | Triage

Sharing

General

Target

820a9c8942ef165ab07626bac6fb0c67_JaffaCakes118
Size

662KB
MD5

820a9c8942ef165ab07626bac6fb0c67
SHA1

ff85f53d156b5c873cdeb3fe421b81cd3670fda4
SHA256

b943799a6c67cda95f009fc8a00458f4e2355fdca9f856e7b31da0503876a6aa
SHA512

cf9fdfce8bc1d7e808d114bab3c4942f2bf0c4b8c62f14ba7711c6279abf689e9d226361b5d3fa8e8c7399ffa61255aec8efc1d734c04a18a5f4685b0acd0268
SSDEEP

12288:x57qSYh+Tu1lxHxCgpcAnirLS9Mm564IMOLRqGo1njBTBUFXwhL20C:n7jYhcExN0i9MsckG6VTuFAt2D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
820a9c8942ef165ab07626bac6fb0c67_JaffaCakes118

Files

820a9c8942ef165ab07626bac6fb0c67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 7KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 355KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ