94d7c58250943001c81427fb19ba6d97_JaffaCakes118 | Triage

Sharing

General

Target

94d7c58250943001c81427fb19ba6d97_JaffaCakes118
Size

31KB
MD5

94d7c58250943001c81427fb19ba6d97
SHA1

7c6a13ff3c48809881df60775833f9e198306dd6
SHA256

904d9dc18d4f6fe283ee44ab2208fb0c07e2a8f70969a29816aad3a4e0e5d4a0
SHA512

f284c187058e179ecb03af68c9846966a20ce5f665a13e2420208cd8269a0392acb5c8fc7809c2a3a61903d6d519eade6bff10a9bc2cb4bae1a9ba8c396dcd0f
SSDEEP

768:wQbtS6eu8fQAtHhjfC4d/Xb6IC8ECOe4:fD8IAtHhjVd/XuIbECB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94d7c58250943001c81427fb19ba6d97_JaffaCakes118

Files

94d7c58250943001c81427fb19ba6d97_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ef8f873f9628ab1b40373f9cbaa34678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetWindowLongA

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ