b87a8ba1f0c2c6e5f9fa8ebf058b4cb9_JaffaCakes118 | Triage

Sharing

General

Target

b87a8ba1f0c2c6e5f9fa8ebf058b4cb9_JaffaCakes118
Size

33KB
MD5

b87a8ba1f0c2c6e5f9fa8ebf058b4cb9
SHA1

e6e210c799acdb60bb29ba64353e4282aeb405a4
SHA256

8da14b1b000cf293ad99b0b37405f5c2ce53670d4fa724cf3b6715359bb320d7
SHA512

d2743431a397598b2be2e16f1a9451ede2491f06bf0ebe1687b04a6b2e59d81b8c8d08b0a08bf5179b1e7d467a56d5fd3f380361c6feb2a4ff298e6bab0a9f62
SSDEEP

768:vRZC5/GvprEuAPqrulnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnT:vJpXAYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b87a8ba1f0c2c6e5f9fa8ebf058b4cb9_JaffaCakes118

Files

b87a8ba1f0c2c6e5f9fa8ebf058b4cb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30312b184a0c882f4ca30e71f56ed7ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
Sleep
ExitProcess

user32

BeginPaint
BlockInput
CharLowerA
CharUpperA
CreateDialogParamA
CreateWindowExA
CreateWindowStationA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetTopWindow
GetUserObjectInformationA
MessageBoxA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 868B - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 143B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ