dc061644047ed4fb3404881e1f793c32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc061644047ed4fb3404881e1f793c32_JaffaCakes118
Size

26KB
MD5

dc061644047ed4fb3404881e1f793c32
SHA1

5833e4294ac5d9558ac5e781e88463c77f61a7aa
SHA256

9c251edd2b33dea62669cef3164df272b4145c76f49c20462f2a6be83ead4118
SHA512

4318d8a568eecc74261f0af928e20dbfba0e3b75dc8ded467f59b368f44295a921580eef4640e92639e19d26fb34a0b9816325d85b351d7f1c604ebb0f0f3ffd
SSDEEP

768:JHrdSjSghR2R8PvBR7Wv3lsOd0fB+WeLdN:JrdAT2UvBR7WvP2p+Web

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc061644047ed4fb3404881e1f793c32_JaffaCakes118

Files

dc061644047ed4fb3404881e1f793c32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93713a50329995811daa966ce1188f5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 342B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ