b47611e24b2cd9f0da17e55f52cb8c10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b47611e24b2cd9f0da17e55f52cb8c10_JaffaCakes118
Size

16KB
MD5

b47611e24b2cd9f0da17e55f52cb8c10
SHA1

be69b44a39957f876d8224b34d16fb558c31fa90
SHA256

16b43579a0c9b33105709aac225091190eb90812bd3092f02e958e6ae787ffa4
SHA512

f20b3554f53493123c12d8ced05dc7f9ea67f537303824066db0e35574a089d56e4703302835c8fe133060f5476bff17a82366d77b2bf1b7f177b75458230d15
SSDEEP

384:Zz9tdSvf+Unh/n68vYoBFx3PZ9oDqwYgN1oyskm:Nz4+Unh/n1vfFx3PH0xYw1dsj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b47611e24b2cd9f0da17e55f52cb8c10_JaffaCakes118

Files

b47611e24b2cd9f0da17e55f52cb8c10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d3ee3557c333fa5a386962171f7a3c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentThreadId
VirtualAlloc

ole32

CoInitialize

user32

CreateCursor
CreateIcon
CreateMenu
DeleteMenu
DispatchMessageA
DragObject
MessageBoxA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ