03826a00e78a20ddbf73e302d24bac51_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03826a00e78a20ddbf73e302d24bac51_JaffaCakes118
Size

22KB
MD5

03826a00e78a20ddbf73e302d24bac51
SHA1

bf7a183a78c1e322e09b32086ad3eb3847795ae0
SHA256

e6d913d11d4a1b5c0b56cc4006da128bda3dfddb3f8383f95bea4122e8302de2
SHA512

19ff60e39d8d89ac56094341023fd470db01ba2d06225c779193d19a23b601147083188544bf5c4674645fa7ffd81461fb613b0aff61738028166dd0e2a99e15
SSDEEP

384:RkXOci0uvBuALRmcKZOWCCAO1uw7EsBj8N49ebBNZgkcm:R3BuA6sDCfXE8GtNZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03826a00e78a20ddbf73e302d24bac51_JaffaCakes118

Files

03826a00e78a20ddbf73e302d24bac51_JaffaCakes118
.exe windows:4 windows x86 arch:x86

648e74ed3df0de0f3fe2e40770d9346e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
LoadCursorA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA

kernel32

Sleep
RtlZeroMemory
GetTickCount
GetModuleHandleA
GetCommandLineA
ExitProcess
lstrcatA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 458B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ