880290a685781dd9b65fdf655996cb94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

880290a685781dd9b65fdf655996cb94_JaffaCakes118
Size

94KB
MD5

880290a685781dd9b65fdf655996cb94
SHA1

f11084fac9a07bcff35fc1583c135942d5e6632b
SHA256

a480b76a3ae78cb283377b23f5c7adafe6f6de6ed8dfa5a1c2e6c825c073a9c4
SHA512

7ad4506851dbad1b0cde7b200ddcc6106f36404dd1f8e3821bf2f384d9c37e136345ad38b4b1c0431f95e643e637a3932a5cf72ad6948bff6caf609a583e7915
SSDEEP

768:RgKIw9bCQqmaDY4PcpLMaEoDyYxhKzk7KBWGUa6:RgPmbCQ1avPcpL6qVKBLY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
880290a685781dd9b65fdf655996cb94_JaffaCakes118

Files

880290a685781dd9b65fdf655996cb94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46a388c72d2b91a67dc8f481630d68ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
lstrcatA
GetProcessHeap
GetModuleHandleA
GetProcAddress
HeapAlloc

user32

SendMessageA

gdi32

CreateCompatibleDC

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qrdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE