d0a3fd1e7c212c626aceeaec28258f72_JaffaCakes118 | Triage

Sharing

General

Target

d0a3fd1e7c212c626aceeaec28258f72_JaffaCakes118
Size

224KB
MD5

d0a3fd1e7c212c626aceeaec28258f72
SHA1

4cc9ecafeedab63b287fa15cc06af97bdb29fcad
SHA256

43be37cb7f900a319976b8110c299f168e8ee1157a8771ccf3c8555f3bc6ed4e
SHA512

b4af854d1463d9f0c45dd4d8fdd3da1d4cba5daa7c06be8d2f19fbf9e75bfa160f81520225dc502867c4dfbe6ae2e4df3734430fdad12135a733db24c78b50d1
SSDEEP

3072:5m3ETgGqZKUZxAE1Nf3zGt2o3suqZsorHwrihdUm+JFU+YC9l:9gtxZxroqZBwuhdUm+JZHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0a3fd1e7c212c626aceeaec28258f72_JaffaCakes118

Files

d0a3fd1e7c212c626aceeaec28258f72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03a8d1036fdff90b08b57dbc547bd75a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
DeleteFileA
lstrlenA
lstrcpyA
CloseHandle
CreateFileA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

user32

PostQuitMessage
DestroyWindow
PostMessageA
KillTimer
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA

Sections

.text
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE