aa793ed1a55f22eb254ff7eb244d4bc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa793ed1a55f22eb254ff7eb244d4bc1_JaffaCakes118
Size

9KB
MD5

aa793ed1a55f22eb254ff7eb244d4bc1
SHA1

9b6ed6df97f6825dd615b4eb10917a4c55a8aba9
SHA256

0d3fcbaa65f120fb80f92986a6126d15844b3ab1ce5e84260d20818bafb7fe53
SHA512

ab0e384bcb0aae1c2bbabf82d194526215a41a542b11f82a9b1e1fa307a7955263995bf8718001f4028e50f9d34fa11fd78f985aca333ae4f2fad7342081a099
SSDEEP

96:Z14XvDpo3hMBakHEG5+kW80hXJWfSEVL0rn/6B3nWhMBakHEG5+kzi2Brs2hMBan:cXvDpqEaWQnEVgrnCQEaW/rtEaWGn4c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa793ed1a55f22eb254ff7eb244d4bc1_JaffaCakes118

Files

aa793ed1a55f22eb254ff7eb244d4bc1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

c6588699e6ac6018a1183f01e894fa21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

RegisterClassExA
CreateWindowExA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorA
LoadIconA
PostQuitMessage

Sections

.data
Size: 512B - Virtual size: 122B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 371B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE