b14b67664ee8aa4c1d56fce5a312d87b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b14b67664ee8aa4c1d56fce5a312d87b_JaffaCakes118
Size

500KB
MD5

b14b67664ee8aa4c1d56fce5a312d87b
SHA1

a7c0e0e9d795c158db1b115624f657e222a13b57
SHA256

fde9a599555d8a1b9c059c039e89cc4321b86c765d3bb9dc7da2f966a87ee5be
SHA512

2f08c38d14ec5e7077b7b79565253a3554f4fb674ab2fa66d0d39d996ad3f4d6b0e25a601a9fb75dd7d64443806fde7bb962035d57e204c36dcb6c3f43484078
SSDEEP

6144:ggtIMwQm+Qv0jsYALqpJRiQDYOhKTfYaNULtt4FKI4IByH8QXg0ASAolG3MuHJ0Z:gUmtL/g5lsTY7QeIBG8ooDJHemKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b14b67664ee8aa4c1d56fce5a312d87b_JaffaCakes118

Files

b14b67664ee8aa4c1d56fce5a312d87b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 60KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 356KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ