dc31a9527969d7a2f07c49c230c8e035_JaffaCakes118 | Triage

Sharing

General

Target

dc31a9527969d7a2f07c49c230c8e035_JaffaCakes118
Size

4KB
MD5

dc31a9527969d7a2f07c49c230c8e035
SHA1

4eb849b55ab0cee6f2223351eb80b75af4c357f3
SHA256

5a44d53f21ce395681d4fbd9b70def4ff5f996a78461bb481e2a878ead25327e
SHA512

d5aeaf2f2e6845a6bca54c0e81aca1624e021b026dc8a591b707f2888a2ae9cb7549d4e41a6e2cd859c92b4f6b6e3fd8f2c633aa0d44eee59fde2de508efb105
SSDEEP

48:6a6mtBCVlDCwySXdOKs+ED13LlWah7VTHL0TjAMGatud:EJTQKs+EDhLlN1HAHqatud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc31a9527969d7a2f07c49c230c8e035_JaffaCakes118

Files

dc31a9527969d7a2f07c49c230c8e035_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a91931c91ec19d87389fae5d6876bed6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RemoveDirectoryA
RtlUnwind
DeleteFileA

user32

FindWindowA
UpdateWindow
SetTimer
KillTimer
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
PostQuitMessage
ShowWindow
CreateWindowExA
DestroyWindow
BringWindowToTop
DefWindowProcA

crtdll

__GetMainArgs
_splitpath
exit
raise
signal
sprintf
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1004B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE