ac294422ff43a767c96fa688e8c8994f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac294422ff43a767c96fa688e8c8994f_JaffaCakes118
Size

26KB
MD5

ac294422ff43a767c96fa688e8c8994f
SHA1

8919a13de60bb495bcebb4b7481de1995767a671
SHA256

117baefbbad6f4b5b5881a41b734d2a98d89fc9e9d61dbb259af9688f93531d3
SHA512

a7f6efb1668932426a8c39fa4628bf13f1235e0f8379ab25d5dd33bea6c1db5c450b83bb1c83c06ef553a8889bce8161a9beacaa0830eb7e61a3469b89c68bf3
SSDEEP

384:wqS3bX7FKRe021IREv57sG/9s45DU8EPsz+WfWdiRMmi5OZ66PL/44W:w51A61IREh7sa9s45wjsqJdipi5u84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac294422ff43a767c96fa688e8c8994f_JaffaCakes118

Files

ac294422ff43a767c96fa688e8c8994f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ef8f873f9628ab1b40373f9cbaa34678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetWindowLongA

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE