ef3a07190500b65fe0831884bdbbc6b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef3a07190500b65fe0831884bdbbc6b3_JaffaCakes118
Size

19KB
MD5

ef3a07190500b65fe0831884bdbbc6b3
SHA1

a0516ae3edc9ed7852cbb900afba7ddba0c2493a
SHA256

e2cbf56d0e061e7b84c5350c9a8bf576c40de7ee30d2c7a451aeddd168821a2e
SHA512

cd8084a51fbc51f152954e0360fa113de93f14d8b0036f6df66cc8c13a753c7d37af7d8e649e4add1a9b95e052de04d2b9e44272a1e7be2cb5d53d31a1639ff3
SSDEEP

384:udMT4QZ5G5gBUb8LANT6KSl4UoawSJfFmuaYFc+3vqjx:udNQAIKSl4UxJdm1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef3a07190500b65fe0831884bdbbc6b3_JaffaCakes118

Files

ef3a07190500b65fe0831884bdbbc6b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a345473bf25100940219bad2239d430

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
ExitProcess

user32

BeginPaint
CharUpperA
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
GetClassInfoExA
GetMessageA
GetSystemMetrics
GetTopWindow
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
RegisterWindowMessageA
SendMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ