abe0f87f1f43e2958736482531bc0830_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abe0f87f1f43e2958736482531bc0830_JaffaCakes118
Size

109KB
MD5

abe0f87f1f43e2958736482531bc0830
SHA1

bc5b8bd329435dc683c0c55df5f53c54e05b8729
SHA256

29c651423c18e302abe7092e9519839b46328a5b33b88fa5fe69f347af6bbcfc
SHA512

262b05ff3d9ecec1f301a6d555c7a75930b7951e8051d82d428085d87e3f5414ee41287bcb585367d23e429f7c8826a61faaa9fe718765e0e5c2aeee9e885ed5
SSDEEP

3072:fn+SaPIJoBn/Y89WSW4TEPmlwNYCmNTyzoQTeC1:fn+S5qBn/dVEPgrZC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abe0f87f1f43e2958736482531bc0830_JaffaCakes118

Files

abe0f87f1f43e2958736482531bc0830_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a8f30cbb0aea1da046bfa4f90c33c9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

LoadIconA
RegisterClassExA
CreateWindowExA
DefWindowProcA
LoadCursorA
GetMessageA
DispatchMessageA
TranslateMessage

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ