b9c92b5dded41793983f9c24fd3390f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9c92b5dded41793983f9c24fd3390f1_JaffaCakes118
Size

22KB
MD5

b9c92b5dded41793983f9c24fd3390f1
SHA1

c09506378a13cab65044572f4f016ea30738375a
SHA256

968036fb666d5622e55d7420ae61bc460b161df4c2b642fc53a05ca3f582c28f
SHA512

102b41048c45b544d2b721acd2959a0f6c9e9091c5bd4faaaa86137df4da3d552c627f43fe96b286dad87ac5f04bb4468d64f85252177366ab00dfb52bb7aa0c
SSDEEP

384:8MkXw/yVAz9ZoZ8QuSlGmUAO1uw7EsBj8N49ebBNZgkcm:j5yVAZ5SYmcXE8GtNZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9c92b5dded41793983f9c24fd3390f1_JaffaCakes118

Files

b9c92b5dded41793983f9c24fd3390f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

648e74ed3df0de0f3fe2e40770d9346e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA

kernel32

Sleep
RtlZeroMemory
GetTickCount
GetModuleHandleA
GetCommandLineA
ExitProcess
lstrcatA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ