f5f28bd035691371e945d26a10bdd50c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f28bd035691371e945d26a10bdd50c_JaffaCakes118
Size

388KB
MD5

f5f28bd035691371e945d26a10bdd50c
SHA1

4870f227ebc6e6048ad92ef8d44fd27148536d93
SHA256

e09a91c2d46a1d33d2535c7763280ee3b3b15fc57edcc7e95fc3488ed50deb96
SHA512

7c5eeefcc18e2eed23245005e5c45b6370a6e86f0e70efa01b3744d6141d3cf09cac3f68386a6af2345a06c4915828568c0eb9349b49ede4d4be7b6af81489fa
SSDEEP

12288:ME/nNBwsV8DG+d0yS0C875TehNgNrAGEJlr:ME/nNBwrdd0TkTVqGEJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f28bd035691371e945d26a10bdd50c_JaffaCakes118

Files

f5f28bd035691371e945d26a10bdd50c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.TEXT
Size: 8KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 355KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ