8a76eeea4d95261928b95cc41b69d6d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a76eeea4d95261928b95cc41b69d6d4_JaffaCakes118
Size

6KB
MD5

8a76eeea4d95261928b95cc41b69d6d4
SHA1

123b085fc44f45782b9ad8cf4e95ae8553ba685b
SHA256

8554fc9d95dbc08130c2b98075d0acc9ab49ce69d17e03815bf3cf9d10449300
SHA512

d2f2d558bc05ec757d61a7225652e79b6558d5845f0bde9346157b71094fef516e7b9b0c2db7aff525cd778075f432fd8ddf48e3ab16a2c6744467a09fa3533e
SSDEEP

96:GPRM45gi5Ffbba2+KsXUta5kgovCZEMtlhGvHs8wNR:qr5Fna2+Ks01go6mMdF8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a76eeea4d95261928b95cc41b69d6d4_JaffaCakes118

Files

8a76eeea4d95261928b95cc41b69d6d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5c13fe715537a6870d0fd684ec895ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CreateProcessA
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
HeapFree
HeapReAlloc

comctl32

InitCommonControls

user32

MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows

ole32

CoInitialize

Sections

.code
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ