a096d9d2296263988b40fd602b420efd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a096d9d2296263988b40fd602b420efd_JaffaCakes118
Size

103KB
MD5

a096d9d2296263988b40fd602b420efd
SHA1

2bd109f707b59ed1d6d5443d6b88cb2500436672
SHA256

a3c8e5646b939895f79e344646f4152d0abbc36b938b9b31ef69889ac1f1ef0c
SHA512

20ee9e006a7dabd24d484e7f9649cc071733d218be30a005c62193d6419a70b2c4b103f2e4f174dc5cf74937e912e69941ccbc403989007335932ba5ff94a3ab
SSDEEP

1536:9pN2vrvwbPzYgO6kQtV4naCquGO2tEsPA/Bns5HDSZew/Xb8f5p+nyS3pPEn:nNC8OK8aCOzPAmVDS4w/Xb8Wny4p2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a096d9d2296263988b40fd602b420efd_JaffaCakes118

Files

a096d9d2296263988b40fd602b420efd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4dcc01fab66cfa928cf4f7a544bb59ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetCommandLineW
GetLastError
Sleep
GetTickCount
GetModuleHandleA
lstrcmpW

user32

ShowWindow
ScreenToClient
DispatchMessageW
MessageBoxA
GetWindowTextW
CreateWindowExW
SetWindowTextW
SetDlgItemTextW
LoadIconW

gdi32

LineTo
CreateSolidBrush
MoveToEx
CreatePen
DeleteDC
GetTextMetricsW
SelectObject
BitBlt
CreateBitmap
GetTextColor
GetBkMode

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 580KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ