f61cc184c6703f71f4bdeda15a60fd29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f61cc184c6703f71f4bdeda15a60fd29_JaffaCakes118
Size

56KB
MD5

f61cc184c6703f71f4bdeda15a60fd29
SHA1

531ecc568befaae1eb2063466e17e66dd4cc12f0
SHA256

15e4a31d8c63935167f3ec188f807e83c2fb6ea81f84cc6c70701faaf40ffef0
SHA512

23fe77a50e0186874afe4c66fb394008c14bef43d930788b8bb73aa1435921a3c821828df137d846e8365103fd80ce7903f42b1aed97ba4f2a678166e0918d22
SSDEEP

1536:cKz5iKwt4scfah7sWVUpMvtwnt4rT+AvxnC:cKzI34scu7VUpwt7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f61cc184c6703f71f4bdeda15a60fd29_JaffaCakes118

Files

f61cc184c6703f71f4bdeda15a60fd29_JaffaCakes118
.exe windows:3 windows x86 arch:x86

ed39fcf0f434d77c4c59e019f0570463

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
DisableThreadLibraryCalls
GetCurrentProcessId
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapDestroy
Sleep

user32

CharNextA
DispatchMessageA
GetDC
GetDlgItem
GetParent
LoadIconA
PostMessageA
PostQuitMessage
SendDlgItemMessageA
SendMessageA
SetForegroundWindow
SetTimer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ