aea8a85f6ff6e23624e708e6a90106fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aea8a85f6ff6e23624e708e6a90106fc_JaffaCakes118
Size

32KB
MD5

aea8a85f6ff6e23624e708e6a90106fc
SHA1

205ffdd8a419e02304e2d1f8854e718c32a22a22
SHA256

d3f6bff66f2793571a6a5b88e2701cdba06f6b78f1fd5ddc8e9c6bf4ba49c7a8
SHA512

a3488d18394349af7dc5b98973f6ef5af6843658c2895626ad7ff627cb6ff74739e0e063d3d82e17a64893d1ba0ae2df65fc7b3ea6d8bad806f17f771d8de7f0
SSDEEP

768:A7E9glTHG/mzIkcjLepuX1lYWrHEIFJEsvwYUMIQEi:A7nCm8DX1qW5Fas4YUMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aea8a85f6ff6e23624e708e6a90106fc_JaffaCakes118

Files

aea8a85f6ff6e23624e708e6a90106fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a584dd4cf4147ceeef5c695ee94c58ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess

user32

BlockInput
CharPrevExA
CharUpperBuffA
ChildWindowFromPoint
CreateDialogParamA
DrawEdge
DrawTextA
EndDialog
FillRect
GetClassInfoExA
GetClassLongA
GetDC
GetNextDlgGroupItem
GetTopWindow
GetWindowDC
InvalidateRect
OpenInputDesktop
PeekMessageA
RegisterWindowMessageA
SendIMEMessageExA
SendMessageA
SetDlgItemInt
SetFocus
SetShellWindow
SetWindowTextA
ValidateRgn

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 778B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ