be7d823ae30291842687b78a043362ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be7d823ae30291842687b78a043362ec_JaffaCakes118
Size

216KB
MD5

be7d823ae30291842687b78a043362ec
SHA1

c4634a2767d895788f8506d985097fd431268ce3
SHA256

b5c271c118d1d617e20367df8021936b4568573a2b62030517a9c7f56826b345
SHA512

e2ecf388fc5874a4f3429304d04dc921b20c9c7d9982af194f8832a8b052b17e3d5f61d5a7604a7454adda438e8d3bed6ec95cca4fb28e790f6f74cae8411c6c
SSDEEP

3072:lXhT+MjBvZLNJOfCSw1uN2NzI2BPn/ShGOnz+xEPAGYRnmsP8VWHQ4pZhtY:tBZnOfCx1uNAzFyZzT4Gm3QkZhK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be7d823ae30291842687b78a043362ec_JaffaCakes118

Files

be7d823ae30291842687b78a043362ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49ef3fd68d8082afb69d946e8eface3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
ExitProcess
GetTickCount
FreeLibrary

user32

RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
SetTimer
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ