83a29ea198e36815871cb48c65822593_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83a29ea198e36815871cb48c65822593_JaffaCakes118
Size

23KB
MD5

83a29ea198e36815871cb48c65822593
SHA1

c2a3145ae7a90834c8c7702c291785d5c4709497
SHA256

dd612abdc3a9b5e11e1dd15440c2b3714c2f65e9a7f58823ce5c36e03fdff493
SHA512

047997fa858ee5ffbd5b3dab86270d9b2f27be1cf77b0b6d560c094164ed24f2836db63f36d2700c77063a7f6ef12805ee1b99a827fcfadd981e6d560f69d1ad
SSDEEP

192:frTDAbPb8HsbTFbtqtCf/JMGxEdvwNkAXFfVcNL7vN8zltvK40HD0x9rF:zXATI+FbtqMyVqhc7Filt9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83a29ea198e36815871cb48c65822593_JaffaCakes118

Files

83a29ea198e36815871cb48c65822593_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e133c2946d27a8feef891039c8e3ae71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
LocalAlloc
lstrlenA

user32

DefWindowProcA
EndDialog
DispatchMessageA
LoadIconA
ShowWindow
SetFocus
SetWindowTextA
CreateWindowExA
PostQuitMessage
GetFocus
GetWindowRect
TranslateMessage
BeginPaint
GetSysColor
GetMessageA
DestroyWindow

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1003B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ