a1cb6e86597f21d9bb4f28535ac5f1c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1cb6e86597f21d9bb4f28535ac5f1c5_JaffaCakes118
Size

12KB
MD5

a1cb6e86597f21d9bb4f28535ac5f1c5
SHA1

6c5f58c06fa91027f73512a3f134bb666813004d
SHA256

92b1986488d13baaab2d20b07d3c97e5892ad7918d8b3fb87cfc99413ff66bf2
SHA512

ce3cca6d274a1f9643919def32fec9b7c97857189d58532e3b0e3c1e47c35a57051841c078c9539a2e53e6c03cf83a7a46e8d2c0f28988248da21034fbdc269e
SSDEEP

192:OzEm+9JCU9lfbF6cXAlYbZHMn6Ifez1ikVVQhC4eKDWlxCRnqPlZ:7DgefB6Odbe3fiiphgmu6nU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1cb6e86597f21d9bb4f28535ac5f1c5_JaffaCakes118

Files

a1cb6e86597f21d9bb4f28535ac5f1c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18427fa7973a0c26bb3d65d1fb74f405

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongA
GetDC
SystemParametersInfoA
RedrawWindow
FillRect
GetWindowLongW
MoveWindow
GetDlgItem

kernel32

LockResource
HeapFree
SetEvent
GetSystemTimeAsFileTime
GlobalLock
VirtualAlloc
LoadResource
GetDiskFreeSpaceA
LoadLibraryA
ExitProcess
GetProcAddress
GetStringTypeA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ