aab3c24aa052aa49c5ebe655e75270cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aab3c24aa052aa49c5ebe655e75270cf_JaffaCakes118
Size

25KB
MD5

aab3c24aa052aa49c5ebe655e75270cf
SHA1

da09a79a069c0a2c3f026a813eb8b3bc155d5f86
SHA256

ed2a36c8786334fe38093d0d265282db53af0dabf2adc37ebd05347104fadf5b
SHA512

d34d6a31f523d4dbf2ddecf7ac9918b7722e8472f169c7f993b5f8233f70eecb3b4cec2dbb80af0c18d60f2093499eb1cbe64dee3cff4df029e8ac9eef761b29
SSDEEP

768:MDkiTwaU29t7tO91q108tdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGWlC:MD7DL7tc4108tdgI2MyzNORQtOflIwoX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aab3c24aa052aa49c5ebe655e75270cf_JaffaCakes118

Files

aab3c24aa052aa49c5ebe655e75270cf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5cdbf67e6579af610fcd31f176bbd81c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
FillRect
BeginPaint
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
GetDC
GetWindowRect
KillTimer
SetWindowPos
TranslateMessage
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ