ae56dd4a70cf0e88a40df126be3fca5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae56dd4a70cf0e88a40df126be3fca5d_JaffaCakes118
Size

21KB
MD5

ae56dd4a70cf0e88a40df126be3fca5d
SHA1

7cc1ee3e9915fec0f6d151b063d2c72ec9c4f9de
SHA256

4a0beb645fa7d8b01931c21e3e966f22c33a674cb753b064053d27d3c1d296d1
SHA512

1c359a0160b04afa6638208dc18699874e22ba12d0c6bd9a2b41e3ba6a8cdee6a52ad0054a846136bc06e1dcdf2d899e616fe5b426b554c5a880172d87c5036b
SSDEEP

384:dlqnD5pvau9fGLAuGR+IA0ROtz/HlgVhvhNxdBSQTDSmvrms:d+D5halyYh5/6hpNxzfPqs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae56dd4a70cf0e88a40df126be3fca5d_JaffaCakes118

Files

ae56dd4a70cf0e88a40df126be3fca5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30312b184a0c882f4ca30e71f56ed7ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
Sleep
ExitProcess

user32

BeginPaint
BlockInput
CharLowerA
CharUpperA
CreateDialogParamA
CreateWindowExA
CreateWindowStationA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetTopWindow
GetUserObjectInformationA
MessageBoxA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 868B - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ