85f8f5e54e38cda48fb9d101d23b1041_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85f8f5e54e38cda48fb9d101d23b1041_JaffaCakes118
Size

108KB
MD5

85f8f5e54e38cda48fb9d101d23b1041
SHA1

e952452fea1fdd275492812522f24585a1a8fab5
SHA256

2859d0cb8fcdbaa6265c2b53592838a6c434720907622d6743b114eac6295a2d
SHA512

0cf0d57a3b813e573c056451993b19a623edc2392a9a4aa97f0f998c2f5ee2adb983ac3862a554e7fb28a47e219522f6a9e756ce24fd77606aa32a284f83dfa0
SSDEEP

3072:xAtB/Mdt+Y6AIo2dzvUjqTomd99FlvF3dASvSu:xoRs+lcTcXlv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85f8f5e54e38cda48fb9d101d23b1041_JaffaCakes118

Files

85f8f5e54e38cda48fb9d101d23b1041_JaffaCakes118
.exe windows:5 windows x86 arch:x86

222d90b3736ed4ab75cdd1889879924a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetParent
LoadIconA
GetCursorPos
GetSystemMetrics
GetKeyState
TranslateMessage
GetFocus
CharNextA
LoadCursorA
GetSysColor
LoadBitmapA

kernel32

GetACP
GetTickCount
GetProcAddress
LoadLibraryA
GetSystemTime
CreateTimerQueueTimer
QueryPerformanceCounter
Sleep
GetOEMCP
GetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ