00f26e8bb225da439ead403fdc6621d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f26e8bb225da439ead403fdc6621d4_JaffaCakes118
Size

83KB
MD5

00f26e8bb225da439ead403fdc6621d4
SHA1

9e1c717790b09e0eaf7a6ef4dfbaa55ac3157ddb
SHA256

b04d0f45642b284c91175b24ed48cbfca3d22356a51b21784942da0f31c14193
SHA512

9abd4ebdd5fede7c043662392f6cc3efabc7f94f5801c70a0347800d57ce04572db8d9f5011b53749345f45695674506bdda4919db6aa7d5d4a91e5e0905bf62
SSDEEP

1536:pzKeIryETCylqTKxymW72qjLLdYsnDEGg6zFDsTwIzOo6tsjCK0RKu8ANzV:tdKyETCcqTrRzxD9g6hI0Iisjj0RKzAP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f26e8bb225da439ead403fdc6621d4_JaffaCakes118

Files

00f26e8bb225da439ead403fdc6621d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3dc189d70fbe60fd96f48ceea8cdbe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
SendMessageA
MessageBoxA
GetDlgItem
SetFocus
DialogBoxParamA
SetTimer

kernel32

WriteProcessMemory
GetModuleHandleA
CreateProcessA
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE