d02929842fca349aa2c26cbf1a0b2871_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d02929842fca349aa2c26cbf1a0b2871_JaffaCakes118
Size

5KB
MD5

d02929842fca349aa2c26cbf1a0b2871
SHA1

0479eb9416969a12a4d7fb3ed0c76e6b73a45308
SHA256

05e6ebe0f107da4d85cea1e347a853feb0f743d48a9edbd6d160a48af19ddc21
SHA512

252ced08e0038da17c4266d68ade57a164353db3295f13fbb81d28add7c6aad19f0e8ce8aab09232b2110374c38f7e1c6c3b3656bc73d53c8119a0e9b0e0b5f4
SSDEEP

48:if6U+EL82VGUk5Ni/H4bTeETeGxFkvlIlkX/1boj9jJQ/dgYKBBHv2MQGgi:R3EL82Y1DiP6SESGL2O1jHui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d02929842fca349aa2c26cbf1a0b2871_JaffaCakes118

Files

d02929842fca349aa2c26cbf1a0b2871_JaffaCakes118
.exe windows:4 windows x86 arch:x86

65547db5dcba81aa671c05dd3550a351

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WaitForSingleObject
CreateEventA
GetCurrentProcessId
WriteFile
lstrcatA
GetSystemDirectoryA
WideCharToMultiByte
CompareStringA
CreateToolhelp32Snapshot
Process32First
ExitProcess
GetModuleHandleA
GetCommandLineA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next

user32

GetWindowRect
AnyPopup
GetClientRect
wsprintfA
DestroyWindow
CloseWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE