8871ef585a905940fdc9efd23a1c5baa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8871ef585a905940fdc9efd23a1c5baa_JaffaCakes118
Size

14KB
MD5

8871ef585a905940fdc9efd23a1c5baa
SHA1

89cfc9ba26dad8d91053094d38c58817037c02bf
SHA256

a1486d0dcf92e0eaf8d1ac78939568aa1e37bf28820f40fc0111d11f2f22facf
SHA512

c8c1c1642c839417b9c7bf91f51c71e1202da104f60c0371c353456e5e49a14cf1ab978e16c4555b9762cbeaf6ccf377043c02a801bc28a8950a56c54733f928
SSDEEP

192:iJZya95ydrCtd8rhpU6pyDBtNC/NONHNBEV8zxeheQQAFt90VcWSloeoXWQu:YLy5Ctd8VpjKNKANBECzwheBAFthWHmB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8871ef585a905940fdc9efd23a1c5baa_JaffaCakes118

Files

8871ef585a905940fdc9efd23a1c5baa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c47c025dbfa0b0df82b89b89f1e06a14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetModuleHandleA
GetCommandLineA
ExitProcess
VirtualAlloc
RtlMoveMemory
CreateThread

user32

GetWindowRect
GetSystemMetrics
LoadIconA
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
GetClientRect
GetDC
ReleaseDC
GetSysColor
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadCursorA

gdi32

DeleteObject
LineTo
MoveToEx
SelectObject
CreatePen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE