d3e5b7615e21411061c646ca6cad844c_JaffaCakes118 | Triage

Sharing

General

Target

d3e5b7615e21411061c646ca6cad844c_JaffaCakes118
Size

245KB
MD5

d3e5b7615e21411061c646ca6cad844c
SHA1

467d9819a37dfe8bd7ec813332096134b634848e
SHA256

4962e73c98eb6bba5ba9024a24f77c69cf73d53e067b70c252f37047b4fa8363
SHA512

58ded0fac72c5812848af0c6e305389dba1cba1f465eae82797249dfb922ed3de5a61c78d0f43d4e56261e8dad4d25648c92b6ac6e8a54da75075cdf9781176b
SSDEEP

6144:XgIeSFrCW39Eeix/XIGoPaiKe2lgg4EJjc9hk1O:XgIeMOWtELN+PnKem4EJjc9hoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e5b7615e21411061c646ca6cad844c_JaffaCakes118

Files

d3e5b7615e21411061c646ca6cad844c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4fbf063ebfaa7c374209526e2d09b2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetProcessHeap
LoadLibraryA
HeapAlloc

user32

ShowCursor
GetClassWord
GetClassLongA
DestroyWindow
BeginPaint
SetTimer
GetWindowLongA
InvalidateRect

gdi32

SetTextJustification

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ