b0acb1f1c3058dfc44682afea2de3034_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0acb1f1c3058dfc44682afea2de3034_JaffaCakes118
Size

261KB
MD5

b0acb1f1c3058dfc44682afea2de3034
SHA1

013b97a8efcb48b4f4e679b220eb0c79ffbdfba0
SHA256

c66ddaa531155463e2536333891e17ec7efde7650c8c698a30c1c10c6c5c6713
SHA512

61d0e5fa5ee5a8347b0f89806982e363a7cd1033e7a138fdfd7bb7c08cfd1ae7dcf148ab320ba4a835e2cf5a78644ff6bfcd3f91af42b03f86aef1ba93d5b87e
SSDEEP

768:g6xFo9/ZMOZMHXp5TuUn6TTQieLa9ptSSSSSSps2iZgrv1aZT00/0000X000000Y:9vkQ35Sw9nbq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0acb1f1c3058dfc44682afea2de3034_JaffaCakes118

Files

b0acb1f1c3058dfc44682afea2de3034_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6081e4d60766c8df68c022f33ec46e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
ShowWindow
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
GetMessageA
GetDesktopWindow
DefWindowProcA
CreateWindowExA

kernel32

CloseHandle
SetEvent
MulDiv
GetProcAddress
GetModuleHandleA
GetCommandLineA
GetCPInfo
FlushFileBuffers
ExitProcess

comctl32

InitCommonControls
InitCommonControlsEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ