a7eba3a62c7ba886c9837c804c741ff8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7eba3a62c7ba886c9837c804c741ff8_JaffaCakes118
Size

244KB
MD5

a7eba3a62c7ba886c9837c804c741ff8
SHA1

e53de4a432fc9c45c29a6d47a618ba361775668d
SHA256

e92b9a61eb1ea05d7a96ed1420ef8be4613909f3df967ec4acb8c97053f12bf6
SHA512

aa9f9d530aa570ba995a220c470de3a530f0b9e58e284993e8504b721f853ebc849ffa7294d403c6cdb4844ea5e62e7dcf9460f44c5ca5b3e4d0320d0f6ab362
SSDEEP

6144:ooTQXECn7gPkKErYpk2/WjJPam5wQqSxnHbcRIiNFYblZ:oosXT7g4ZfJnmQqS9HbeN4l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7eba3a62c7ba886c9837c804c741ff8_JaffaCakes118

Files

a7eba3a62c7ba886c9837c804c741ff8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1668d817876d50621434c75b1e966d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameA
GetDefaultCommConfigW
GlobalUnfix
FindFirstFileW
SetHandleInformation
GetStartupInfoA
AddAtomA

user32

FlashWindow
SendDlgItemMessageA
GrayStringW
GetMenuItemRect
GetMenuDefaultItem
FindWindowExW
EnumDesktopWindows
GetWindowTextA
GetSystemMenu

gdi32

SetMiterLimit
Polyline

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE