cf59ed71293a2fbf6e5df6ffe40f671d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf59ed71293a2fbf6e5df6ffe40f671d_JaffaCakes118
Size

75KB
MD5

cf59ed71293a2fbf6e5df6ffe40f671d
SHA1

b6fdce64a111a6f371cd40262940ab4b4fdd228b
SHA256

84f6fef2cad7636fc39d61905592fa79c2d2e35b24dc036afe23a94247fa2d21
SHA512

f1c113604769ca6e789091a0f870bf6d96c7884487aa6ddb388960df5a82b7df96d29b16f0b63bf14820558f6b35ed8cc050cad25a193b8965eceef86a488ef5
SSDEEP

1536:Ht7/RLYAsYEbTitiL7K4o8WDnnaq7ymhhCBID/WYmYkDezBsC/CvWnQyZ0:F1YTYI+tiS4pgnnnymhhoIqDRezBDCvD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf59ed71293a2fbf6e5df6ffe40f671d_JaffaCakes118

Files

cf59ed71293a2fbf6e5df6ffe40f671d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

560067b1a913b93b8a94fc689f5e4db8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualProtect
lstrcmpiA
VirtualAlloc
CreateThread
GetModuleHandleA

user32

SendMessageA
KillTimer
DefWindowProcA
SetTimer
DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
RegisterClassExA
LoadIconA
LoadCursorA

Exports

Exports

fgdfgdfg
gtbfdb
start

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ