a55468820c2fe795b6992fb941b9cb63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a55468820c2fe795b6992fb941b9cb63_JaffaCakes118
Size

19KB
MD5

a55468820c2fe795b6992fb941b9cb63
SHA1

3c8ae8222fe86d0c413875c2e96d93cd8166494a
SHA256

fb70d1cdde21f97e556470724559f421d87f7f8bf81a11592a27bd71cef8c2bb
SHA512

8c3169491a52823508e4d70b102e279509595a95d01a4d613e57c19019d251af8a78fd57148163ad51c071229dc73fa844625212e90533e6268cc874fdb3a5e1
SSDEEP

192:uXy4Rmi6ENEAk5Vgg5GQ8b1wN/A9iZbIcFHrY9W14APTK7YykxNU3Jg6:uX5vK5D78BwN/xrF8PMcYykmg6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a55468820c2fe795b6992fb941b9cb63_JaffaCakes118

Files

a55468820c2fe795b6992fb941b9cb63_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b271bce6a1e17ebf9ac5fcd3deb5ff90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
SendMessageW
CreateWindowExA
RegisterClassExA
SendMessageA
DefWindowProcA
GetFocus
EnableWindow
UpdateWindow
IsZoomed

kernel32

CreateFileA
HeapAlloc
HeapCreate
CreateFileW
HeapDestroy
ExitProcess

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ