db595cf103a5d0ad0de4b59fd2e08430_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db595cf103a5d0ad0de4b59fd2e08430_JaffaCakes118
Size

11KB
MD5

db595cf103a5d0ad0de4b59fd2e08430
SHA1

5ce7038e5cbf4880fdd1025b48d5323eee9c276c
SHA256

12d5acb712fdcaf272dae1137fe2a2db23f9d5fd8a6394de8f03b5c29c8342fc
SHA512

8e306e129f469ac1bd05d4fe7c47a8040f1f679daf89c758cf8c0eb0cf7d79d7a597db9d62eb07c5d4c1c8b44257c4bfd831454aa24f473399b044c91c726ea1
SSDEEP

192:CnYdZ+2SHQd+5+ul3zgkwIuPiuKInL5iHFoU8cZUUDy4BTaw5+WsW:UYb3oj1uKuKWw8vUDt5tsW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db595cf103a5d0ad0de4b59fd2e08430_JaffaCakes118

Files

db595cf103a5d0ad0de4b59fd2e08430_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad58ab3807d765b22d5c5b58b28dea09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
DrawTextA
EndPaint
GetClientRect
GetMessageA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ