b485958eb739893d75fcb1736de26db8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b485958eb739893d75fcb1736de26db8_JaffaCakes118
Size

1024KB
MD5

b485958eb739893d75fcb1736de26db8
SHA1

7a09bba7e213e85441f0263ca7530d446fe8889b
SHA256

98cac118cca478f692a1b59beef1a21c685ef5a68ba7278e513a53be23f2b319
SHA512

d1a43e9d58bcb23acc8fab93bf57627f3a7bce9d332bd1c0b3705d8ef90887c2e7a63a2a9f19f4dd17bb8d425d44b3b4286f10ee0d58bc3e9c4bc123ce17467c
SSDEEP

24576:EEbo5mroaDaVfwdrReufuxhZ75Sr4/zS0OBKGXNyNJ6:EEs5mrFGfQ32xTdS8/zSRZ9Q6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b485958eb739893d75fcb1736de26db8_JaffaCakes118

Files

b485958eb739893d75fcb1736de26db8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 244KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dyamarC
Size: 356KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dyamarD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ