d621fc0c036ea12c1faab5015e8dd323_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d621fc0c036ea12c1faab5015e8dd323_JaffaCakes118
Size

14KB
MD5

d621fc0c036ea12c1faab5015e8dd323
SHA1

2b9cd20db711e60838b4e389f45100343e1c51b4
SHA256

5f9c01b97354e1324c7514b9fc121da2939e29bdae1b0d260d305ee6b5f63892
SHA512

b8e67aa1fa8cae1b9caf86de8bb39540f9209b33c074949fcc4d604ef34e15dd8f229d33662e9e03f2114af8677dac735e1a1d094b2bfda887d460d72e4cc4eb
SSDEEP

192:SjIuVoh8tbeq6kbkxKoPIyUMoFl1oynfJP2Oh+AOQOBJbZBEW1QfXp:SjIAaIbL6kbkxRIyel11RlPOBJrXwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d621fc0c036ea12c1faab5015e8dd323_JaffaCakes118

Files

d621fc0c036ea12c1faab5015e8dd323_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0c1dc5f0ca851780af749c822db8ae97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
PostQuitMessage
ShowWindow
UpdateWindow
PostMessageA
SetWindowTextW

kernel32

GetModuleHandleA
GetStartupInfoA
GetModuleHandleW
CloseHandle
CreateFileW
WriteFile
ReadFile
GetSystemTime

gdi32

SetBkColor

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_exit
_XcptFilter
exit
_acmdln
_initterm

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ