8e44a91c63bbae1a51e8d2c57c93f87b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e44a91c63bbae1a51e8d2c57c93f87b_JaffaCakes118
Size

61KB
MD5

8e44a91c63bbae1a51e8d2c57c93f87b
SHA1

62062168c45ab08315c9064851e476f88c068d3d
SHA256

f0baf85abe21db2634ecb568d681bfd3a86b9b3cc528b6da970991af27c0af8c
SHA512

63310af24cc0437902cc84296591676172e70e943ba24ac9637a9582e7a63cfb0d57fb9b2d95ccf8d77df359ed886e72b493e6bdd920eed57fa76bba9c047b0d
SSDEEP

768:xtn4Hl0VCd6/EAnkNcAdb1wC3s41qsNEO0aheQJVzOAdBnwKIJLfU/f6StFW7eWY:xtnLMenqcAECcXsCQhJrnw3LfU/iP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e44a91c63bbae1a51e8d2c57c93f87b_JaffaCakes118

Files

8e44a91c63bbae1a51e8d2c57c93f87b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

176f853127e9ce5502384e9b5e100509

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
CloseHandle
CreateWaitableTimerA
DeleteFiber
DeleteFileA
DuplicateHandle

user32

MessageBoxA
CreateIconFromResource
CopyIcon
BringWindowToTop

gdi32

CreateBrushIndirect
CreateDCA
CreateHatchBrush
CreateSolidBrush
DeleteColorSpace
CancelDC

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE