9584bb11057c9b79ef10e69789fac7e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9584bb11057c9b79ef10e69789fac7e5_JaffaCakes118
Size

52KB
MD5

9584bb11057c9b79ef10e69789fac7e5
SHA1

50c3fa32982e9020a1aa203573ec0677085d5c7b
SHA256

baba85cba40fc329a1545e7b9c8dd5849304efbd59dde97ba0d57a3de15bc0e4
SHA512

1431174e82b15e2d0fd4f2300ebebeb2e9cbc821c9e985811ceca9d2fbd10d1a79dd3cf40d6472ad9656fe1c4a1fb5e9e4d59c04108595bdd4d1b81074915b51
SSDEEP

768:YZZbDKYV4c8nTffV/UVtpGM1WpHdRzOm2N5faZMkAnahXzvZWau:8KACHV0tM7pHdRSm2N5fmAEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9584bb11057c9b79ef10e69789fac7e5_JaffaCakes118

Files

9584bb11057c9b79ef10e69789fac7e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3200f98c78dc9f1c321d69161a1b8cdf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
InterlockedExchangeAdd
RtlZeroMemory
VirtualAlloc
lstrlenA

user32

CreateDialogParamA
EndDialog
GetWindowRect
LoadCursorA
LoadIconA
MessageBoxA
MoveWindow
SendMessageA

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ