a7db44978b0c6011ae6e396afa3c16ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7db44978b0c6011ae6e396afa3c16ba_JaffaCakes118
Size

4KB
MD5

a7db44978b0c6011ae6e396afa3c16ba
SHA1

978ae7e08922c7b75135878156520768bb1b2ee0
SHA256

25aac6887c4b4f2e1867f446336507d7831881fd2d68cccac895479c03039edc
SHA512

91eccdac7579903dd53bc9768bae964166de767fc8753c2cd3989ae834efa45c41e3036175514799027807060226d10a237aa12ea4f393dcdc29d1a83c82e307
SSDEEP

48:6USDlW7zAIap0io/FIV0Sc/wgew4IBKgadgz4rxguAHvE+bkg4/kB:YD+AIaSVdIV0Sc/wgz9GhGvHs8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7db44978b0c6011ae6e396afa3c16ba_JaffaCakes118

Files

a7db44978b0c6011ae6e396afa3c16ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

befbce2bf4559cdb6bcdf61b5b6b80ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
HeapFree

comctl32

InitCommonControls

user32

MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows

ole32

CoInitialize

Sections

.code
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 541B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ