d0c1a39abcfbbc55822a08c429aff2bd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0c1a39abcfbbc55822a08c429aff2bd_JaffaCakes118
Size

26KB
MD5

d0c1a39abcfbbc55822a08c429aff2bd
SHA1

92fad57d542ececd359a313e06ba0acb57da0416
SHA256

04595d38af20ee93799ed6feb572af61c742addb64b2e99a40e030706cba89e7
SHA512

8b9d1ea55e328117deb032cef10dd3d0e973a7e177e5e8ba1fb0c5b480334479a87edffd64c5691a71c44b9adda7925e69d7012066b3a28b26970b28c492ebe3
SSDEEP

384:hD0/cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccl:hD0u7UTyiWy0jai3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0c1a39abcfbbc55822a08c429aff2bd_JaffaCakes118

Files

d0c1a39abcfbbc55822a08c429aff2bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c786aa5be67ca5bf0bd61074fd4a4f55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
LocalAlloc
GetCommandLineA
lstrcatA
GlobalFree
GetLastError
GetStdHandle
GetStartupInfoA

user32

TranslateMessage
ShowWindow
SetWindowTextA
GetWindowRect
MessageBoxA
EndDialog
GetClientRect
GetFocus
DefWindowProcA
DispatchMessageA
EndPaint
BeginPaint
GetMessageA
DialogBoxParamA
DestroyWindow
CreateWindowExA
SetFocus
GetSysColor
ScreenToClient

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ