ea3f376cf895e94e34446de9ac3c699a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea3f376cf895e94e34446de9ac3c699a_JaffaCakes118
Size

9KB
MD5

ea3f376cf895e94e34446de9ac3c699a
SHA1

676e02fabeb2abc45c9fff9697668265a8e306b7
SHA256

76613aee0bde230c27e137fd8d016cd27f4f9c37bc2549aa9c7ca9aea6786c66
SHA512

9da8fabfe510da61453d56adea33d4363507f3b584ebef5be44d8525e7c382b79f3b79c2c8bffb66bf7c3a46c5e248075c47d2e8f7ad74d5563b2bf55792b482
SSDEEP

96:1MPp0DkBdZtfwrdetoRotzPAnIryfCEZmOxXSSTvslDKfjj8vKl6ZxxOIspIVa96:fYdZmrd7oVpry7zX77slDK/6fxOb4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3f376cf895e94e34446de9ac3c699a_JaffaCakes118

Files

ea3f376cf895e94e34446de9ac3c699a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad58ab3807d765b22d5c5b58b28dea09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
DrawTextA
EndPaint
GetClientRect
GetMessageA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ