8626691026a4d95a26b5b5f7b0a88577_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8626691026a4d95a26b5b5f7b0a88577_JaffaCakes118
Size

15KB
MD5

8626691026a4d95a26b5b5f7b0a88577
SHA1

40490acfd34bd5b71c02c7cc9a2e6093e9fff570
SHA256

8bb771a5558c0a9e4f01c60fecedff51325085b1605c5a25bdf29d935a357505
SHA512

93cd72c238fbe58447465132f230e9daa9fc7e28af3ec22c98fef9e9f5211758f189432fb01e92e9f3dda88cacc6b0108fa77aa795453396aaf8ef1b3ebba377
SSDEEP

384:iSP/2jbvosMEOeGbrru+v62by2GviHeX:l/G7osaxrSI6/28

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8626691026a4d95a26b5b5f7b0a88577_JaffaCakes118

Files

8626691026a4d95a26b5b5f7b0a88577_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f7fb190e805850af5f473ff768d3f29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
SearchPathA
GetVolumeInformationW
SetComputerNameW
EnumSystemLocalesW
FormatMessageA

user32

DialogBoxIndirectParamW
MessageBoxIndirectA
CreateAcceleratorTableA
DefWindowProcW
LoadCursorA
SetWindowsHookA
IsCharLowerA
VkKeyScanA
TabbedTextOutA

gdi32

GetCharWidthA
CreateScalableFontResourceA
CreateColorSpaceW
ExtTextOutW
GetTextExtentExPointA
GetEnhMetaFileA
GetCharWidthA

Sections

.share
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 739B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ