a26abcec149124379445a4224808303c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a26abcec149124379445a4224808303c_JaffaCakes118
Size

79KB
MD5

a26abcec149124379445a4224808303c
SHA1

37eb17f7e05dacf8b7952cda91642b8109ce156e
SHA256

dc3701517cac0667a6ec613ad7612a18ba4074c50f8d007f130261678ac5465b
SHA512

3b0a4be6ca16c8745caa68416305931b1f1af93f962a2e78173070da593d60d645b48da08bee0d62ea0157145690b953f90b2715aac1dfdd0aa2b7ffa400c359
SSDEEP

1536:PTFNkQLpWXpVoZnWTxVupWuLgvulpZnACur9CvzxkkJ1Dpuh1XQ2mMcBEzI:PzkQLp6UWTFF4TACrzxnJ1DC1ADLB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a26abcec149124379445a4224808303c_JaffaCakes118

Files

a26abcec149124379445a4224808303c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

34ff56d62f4dd2da43c1b3f47b891148

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
malloc
free
memcpy
rand

kernel32

CreateMutexA
CreateEventA
SetEvent
WaitForSingleObject
CloseHandle

user32

SendMessageA
GetWindowRect
SetTimer
GetScrollRange
SetScrollRange
MoveWindow
PostMessageA
SetWindowPos
CreateWindowExA
InvalidateRect

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ