856eeeb85a8fde936a11594f676aa017_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

856eeeb85a8fde936a11594f676aa017_JaffaCakes118
Size

14KB
MD5

856eeeb85a8fde936a11594f676aa017
SHA1

d15b9034d08b9e756f45121ed9664861bf301890
SHA256

c092b3219e73f48b00908e009e04268b0d6a5a9098748b964acd01478fb0f3f1
SHA512

8f0c8e6da2659531c503d89dcf1903359d4fbd1d4acdbf0b3baf977b143e7e0a24297066033b53446e7571199c6b26ceee541bfdd669c7b0035ef58acf9ae045
SSDEEP

192:BbYbGXtVyE7hMUKk+/ceOQ72whiXSX1NIK4NiTISNLZpKf5uT8fXfrC/InowB06/:JVyEd3XS2wgStoiVNL3Kf5uUTC/P1el

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
856eeeb85a8fde936a11594f676aa017_JaffaCakes118

Files

856eeeb85a8fde936a11594f676aa017_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a584dd4cf4147ceeef5c695ee94c58ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess

user32

BlockInput
CharPrevExA
CharUpperBuffA
ChildWindowFromPoint
CreateDialogParamA
DrawEdge
DrawTextA
EndDialog
FillRect
GetClassInfoExA
GetClassLongA
GetDC
GetNextDlgGroupItem
GetTopWindow
GetWindowDC
InvalidateRect
OpenInputDesktop
PeekMessageA
RegisterWindowMessageA
SendIMEMessageExA
SendMessageA
SetDlgItemInt
SetFocus
SetShellWindow
SetWindowTextA
ValidateRgn

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 778B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ