8d924227d61bec8adc43e01ed73ed07e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d924227d61bec8adc43e01ed73ed07e_JaffaCakes118
Size

174KB
MD5

8d924227d61bec8adc43e01ed73ed07e
SHA1

3aa9e37814799f2732218b6192aea62fe1ac6f14
SHA256

edd30b60f009d2bbcbc5fa4a81cfa8771beb22da8c7fa5deda14c4d84de14668
SHA512

17334a64822fec335fd8057f1a781cc8bf3e0d8e15c58020c7b4de211bc6f08e21339a2579de117a5d738bddc3990062e194732e8497bdd46c41cf0159cfa1cf
SSDEEP

3072:uhv04Z+jPAfiuaeEEmbwvYEtWTs55MY4JTu1xZDuQxM5iC8/3qSeW/:sv04Z+j3e48QEtmxYEK1xZK4MMC8/3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d924227d61bec8adc43e01ed73ed07e_JaffaCakes118

Files

8d924227d61bec8adc43e01ed73ed07e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5af3db5ec6f1dccb224c74c4095641ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Folder of Working Project\ProjectTest

Imports

user32

DrawTextExW
SetRect
ShowWindow
SetCursorPos
SetWindowTextA
LoadIconA
GetDC
IsWindowEnabled
RegisterWindowMessageA
GetScrollPos
GetKeyboardType
SendNotifyMessageW

shlwapi

PathAddExtensionA

kernel32

CreateWaitableTimerA
HeapUnlock
lstrcpynW
SetFilePointer
lstrcmpA
OpenSemaphoreW
CreateEventW

Exports

Exports

_ExitWindowsExExitWindowsEx@0

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ