8a415efde41ae502d726de0d2a3b8632_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a415efde41ae502d726de0d2a3b8632_JaffaCakes118
Size

24KB
MD5

8a415efde41ae502d726de0d2a3b8632
SHA1

8e932902482bc56864ab1230e58d01f669928775
SHA256

89f29d86c3fc9b015d872f96772f3fcd5f0b0bbd21f04a5ad1404a057dfa05ba
SHA512

d2529d0707827e9b51cffdae8d517ed6dd90a7fb427caaae6e11d6b9e5cbbe7140d0382b3200cee257ae12a9e70d5cd94605d31158456f4f391bdaf782e5e1df
SSDEEP

384:LOCcV2lp1GhZdBaaWovDYI8n7UAOJmxtEdSIvprLwt/o:LOr4U47U2k8o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a415efde41ae502d726de0d2a3b8632_JaffaCakes118

Files

8a415efde41ae502d726de0d2a3b8632_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02521a7b1aaaeec5c891e4eaf7aa374d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetLastError
GetModuleHandleA
GetCommandLineA
ExitProcess
LoadLibraryA
GetProcAddress
Sleep
FreeLibrary
RtlZeroMemory
RtlMoveMemory
CreateFileA
WriteFile
CloseHandle
TerminateProcess
GetSystemDirectoryA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
FlushFileBuffers

user32

GetDlgItem
SetFocus
EndDialog
SendMessageA
SetDlgItemTextA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ