fea0e440c81a199b0ee9cf8a4e9732b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fea0e440c81a199b0ee9cf8a4e9732b8_JaffaCakes118
Size

8KB
MD5

fea0e440c81a199b0ee9cf8a4e9732b8
SHA1

89ca1a431ee3061ab9c38181df4d69abaeafe407
SHA256

5008606afa89137bc219308b38a5ddeec3a76795aba28ba7ca23b2d1dffc74e0
SHA512

3365391e9b5289ec0d6e560ae5ecbdf146d92411874dfc889a8029787ccdf8306065fe81279ef295ccc40aaf8b7efbfcf3a22158dc9d52ef22ea99cf57da66c5
SSDEEP

96:iIewwvC35aXRcL6svwDqn70iPW9Y/gWwsSa/JIA9v4:sU5aXRc6kqqn5WWgW39v4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fea0e440c81a199b0ee9cf8a4e9732b8_JaffaCakes118

Files

fea0e440c81a199b0ee9cf8a4e9732b8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

4956a7a2427d242d80fc47053fe92b7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
wsprintfA
MessageBoxA
DestroyWindow
CharNextA
CreateWindowExA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA

kernel32

FreeLibrary
GetProcAddress
FormatMessageA
GetCommandLineA
SetErrorMode
LoadLibraryA
ord35
ord37
ExitProcess
GetModuleHandleA
GetStartupInfoA
ord36
GetLastError
lstrcpyA

gdi32

GetStockObject

shell32

ord122

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.code
Size: 512B - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE