945396c8d4fb82ee9cc9c0df5f9a86c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

945396c8d4fb82ee9cc9c0df5f9a86c2_JaffaCakes118
Size

43KB
MD5

945396c8d4fb82ee9cc9c0df5f9a86c2
SHA1

8c0621ac2bb11bee0affb20996563a3fa57451b1
SHA256

0359d01e72946b8e79a0df3365041ea91eedf6ae1f53f42c16dd952fb1382134
SHA512

a9cfaf691b0b4d0a4aea40dd17278bd74432385d02857b0feefb8ab0aa301aa84e21991f772ec20022b8df9d923234402f3a22b7348ff752fbe0f5b46158b690
SSDEEP

768:fTuJQrZe9p/5ADgthTSqx0UK80ETFPKLWtxEqvQz83y2cGYl:cMVeSI0UX5CLWtb3y2cGYl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
945396c8d4fb82ee9cc9c0df5f9a86c2_JaffaCakes118

Files

945396c8d4fb82ee9cc9c0df5f9a86c2_JaffaCakes118
.exe windows:9 windows x86 arch:x86

846a7d8783552ac520c8ebd49590bd36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
GetProcessHeap
GetCommandLineW
GetModuleFileNameA
SleepEx

gdi32

DeleteDC
GetDeviceCaps
CreateCompatibleDC
PatBlt
SetTextColor

user32

LockWindowStation
DestroyWindow
SendMessageW
PostMessageW
GetWindowRect
GetDC
ShowWindow
GetDlgItem
GetSystemMetrics
GetDC
GetDC
CreateWindowExW

Sections

.text
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ