8e350499c5626e824be485bfdad891b1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e350499c5626e824be485bfdad891b1_JaffaCakes118
Size

35KB
MD5

8e350499c5626e824be485bfdad891b1
SHA1

5cf32806c098d88b063210ba1a412e45c31f0515
SHA256

18debdb55f711143b689e9a4f4e9a113e15090ace54ebf59def3d8720911d09c
SHA512

e2cc38dc730b3767ae7dabfc33a299bb72d849f50d5411d541608c91b9c8c24bda7fbe5b6687e52c3994c3be978426ac77f65ef7599793b54b8f78843d8259bb
SSDEEP

768:VXkKKmnMLGU8+IJrDXxhSjSxmrqqQUPEII7h5I:CKKmnZ+IJ3hMhqqQUPlQnI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e350499c5626e824be485bfdad891b1_JaffaCakes118

Files

8e350499c5626e824be485bfdad891b1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d710213b3a7d904e410c2e3df28ac5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
HeapDestroy
HeapFree
HeapCreate

user32

KillTimer
SendMessageA
SetTimer
UpdateWindow

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ