a1fa81a009736325093269e7f346a063_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1fa81a009736325093269e7f346a063_JaffaCakes118
Size

218KB
MD5

a1fa81a009736325093269e7f346a063
SHA1

4e59546db3804df4a3efba90ac82dd50d1a3c820
SHA256

da91742f14e4bde35627d86c076386dcd98c3f69b5434e341df9b86ba89a3dc8
SHA512

9e3220a85c4b7acdead8fceef0973a2a5f2d8f9f5a306b19937360ccc72f9bf4dd4257e864f007553fba6edc72e9b5e6bc262d00500436ff5d7540acefb617f8
SSDEEP

6144:o4irBNsUtcFA0kXJWazmkaeYUaqposR+Wx2L3Az5BQMvFR:olD1tcBKAa1YUjus4WxOgbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1fa81a009736325093269e7f346a063_JaffaCakes118

Files

a1fa81a009736325093269e7f346a063_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5af3db5ec6f1dccb224c74c4095641ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Folder of Working Project\ProjectTest

Imports

user32

DrawTextExW
SetRect
ShowWindow
SetCursorPos
SetWindowTextA
LoadIconA
GetDC
IsWindowEnabled
RegisterWindowMessageA
GetScrollPos
GetKeyboardType
SendNotifyMessageW

shlwapi

PathAddExtensionA

kernel32

CreateWaitableTimerA
HeapUnlock
lstrcpynW
SetFilePointer
lstrcmpA
OpenSemaphoreW
CreateEventW

Exports

Exports

_ExitWindowsExExitWindowsEx@0

Sections

.text
Size: 155KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ