de7771bce69fcc1af5513ea017fde2d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de7771bce69fcc1af5513ea017fde2d0_JaffaCakes118
Size

46KB
MD5

de7771bce69fcc1af5513ea017fde2d0
SHA1

3fd4fc1370eb363352f1d7dfcc53cf14189b503c
SHA256

7743f07b3892efdd1d42e272d8d23d6bad45a38cc7626824f3c500e1cb7ba6e0
SHA512

28dcffb2f959cc89b174359d42d97afaffd8d15c3deb1699d6de4143d9e143bf3656de9c7c1e09a525992a2845aa717b964c5d1ec560fabbd36f473fcb148548
SSDEEP

768:3pDHp/N0n+9US638B81DC1KSPqRoHQjbSgN0tSc2u2h3yKnuKKLK3Q8:3Fplld/ODc8ou0theznZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de7771bce69fcc1af5513ea017fde2d0_JaffaCakes118

Files

de7771bce69fcc1af5513ea017fde2d0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

1b58d19c8bdaee51d31c5edf43286971

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
Sleep

user32

DefWindowProcA
DispatchMessageA
GetMessageA
InvalidateRect
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassA
TranslateMessage

Sections

.text
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE