c7b3db8d6defc82af0ec040784284427_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c7b3db8d6defc82af0ec040784284427_JaffaCakes118
Size

115KB
MD5

c7b3db8d6defc82af0ec040784284427
SHA1

7f9df01857296df352b77ef267d326a6138066b4
SHA256

ac18607ddff6347bb5ce215262cfbfcae28d449f2d5d52799941592a5c8834e5
SHA512

d6461665cac7246f32f8f2cab9b2a1a470c826eae6455647652f4f0c31aa8dd97fd919961bd256d351c37c26c77d2398277387b1b3dbc9d842bcccdff38af730
SSDEEP

1536:Ux52892XRXuqPJf9KMUc3tHqLubEDWCXFxgJ4L4yj5a+57dKk5LXlhU8PNOjV8T:ULsRTnHqLubEFcojAQ0kplbN4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c7b3db8d6defc82af0ec040784284427_JaffaCakes118

Files

c7b3db8d6defc82af0ec040784284427_JaffaCakes118
.exe windows:8 windows x86 arch:x86

eca12d274eefaa7c71d3b309565c473e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
DispatchMessageA
RegisterClassA
UpdateWindow
SendMessageA
CreateWindowExA
TranslateMessage
DestroyWindow
GetMessageA

kernel32

GetSystemInfo
CreateEventA
ExitProcess
SetThreadIdealProcessor
GetCurrentProcess
GetCurrentThread
GetCurrentProcessId
GetProcessAffinityMask

oleout

CreateNamedPipeA
OpenThread
CreateFileA
ReadFile
SetFilePointer
GetCurrentThread
CreateFileMappingA
UnmapViewOfFile
ConnectNamedPipe
GetThreadPriorityBoost
MapViewOfFile

Sections

.text
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ