d9a4ff670d2a1939d4af78882d1a7b22_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9a4ff670d2a1939d4af78882d1a7b22_JaffaCakes118
Size

32KB
MD5

d9a4ff670d2a1939d4af78882d1a7b22
SHA1

5edbc2b8a8367c62a2c87aaf5ba4147e67901bee
SHA256

25b76fb0f9c26a4a98c333a8c89ff1f7c363af9ee1ad4cecc14ed70399797c54
SHA512

761a5c13fdbeb1bac0582c2ec6aec3e63010993dc875efb92685b55e5f61b2e9163f3edb5eb89e3cad39a0a2e681957e100bd865153f36a628d5910573011ffb
SSDEEP

768:S4hkie5kpI2rc6ETxWOzZVhJDlo0FqAYAJCrEaP8z6SzjMgHxoBVBbo586:tvkqWdWOzZRDq0FzYQa0RnMUW6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9a4ff670d2a1939d4af78882d1a7b22_JaffaCakes118

Files

d9a4ff670d2a1939d4af78882d1a7b22_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30312b184a0c882f4ca30e71f56ed7ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
Sleep
ExitProcess

user32

BeginPaint
BlockInput
CharLowerA
CharUpperA
CreateDialogParamA
CreateWindowExA
CreateWindowStationA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetTopWindow
GetUserObjectInformationA
MessageBoxA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 868B - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ