d728d9153d85c07c49cec3b6bd7f6fd5_JaffaCakes118 | Triage

Sharing

General

Target

d728d9153d85c07c49cec3b6bd7f6fd5_JaffaCakes118
Size

23KB
MD5

d728d9153d85c07c49cec3b6bd7f6fd5
SHA1

df9c9e0da53c0f7b64ed81a86db2a9b6164baf81
SHA256

e7acad4dd50dea3a0a920df053e489ca19a8d6f8d8ffaf98a5bbbb875eda548c
SHA512

a9f09bc72fbe6b31ff5b87a2eb4170aedcd1eb5697d4db7c34cb770bdc8c389b7f8fc94cc1a2570d91b73c6dfa457d615716d29abb7b2269cb197ccaf3814c36
SSDEEP

384:FkXEvPiK7rz3zdz3NFO1uw7EsBj8N49ebBNZgkcm:FVSK73p+XE8GtNZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d728d9153d85c07c49cec3b6bd7f6fd5_JaffaCakes118

Files

d728d9153d85c07c49cec3b6bd7f6fd5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

648e74ed3df0de0f3fe2e40770d9346e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA

kernel32

Sleep
RtlZeroMemory
GetTickCount
GetModuleHandleA
GetCommandLineA
ExitProcess
lstrcatA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ