aefa41903e68bb21b306bfdddc263adf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aefa41903e68bb21b306bfdddc263adf_JaffaCakes118
Size

37KB
MD5

aefa41903e68bb21b306bfdddc263adf
SHA1

eeade2970bb53191fb6de680f4d9a3978dcf7d00
SHA256

6a21e8959d2c633fbb1d028a7aca8c8bd28bce104bc25c37c254c3553c390945
SHA512

005e6b031de9dc7292c5f3c0debd79cda25b0db5c4a72a702e50dd4c1ff8ddfb22bc69fe65c2cade53ebb5c9c9b766bd2b01305538685ac0af2388d1c5296fc1
SSDEEP

768:B1fsvquCjaP+KCCKBY28eC4v3TLT2gu6kst+0TS8HV4zTVu/nVLLV0:P0qu0ZY2N3TA6kswOS0Vqu/l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aefa41903e68bb21b306bfdddc263adf_JaffaCakes118

Files

aefa41903e68bb21b306bfdddc263adf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a108f0b76885d57f2cb3471b1f5f9511

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
lstrcmpiA
lstrcatA
GetProcAddress
LoadLibraryA
ExitProcess
Sleep
lstrlenA
HeapDestroy
HeapFree
HeapCreate

user32

ReleaseDC
DestroyWindow
SendMessageA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ