01d13622835e4bd0291bb8d7299a92a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01d13622835e4bd0291bb8d7299a92a9_JaffaCakes118
Size

5KB
MD5

01d13622835e4bd0291bb8d7299a92a9
SHA1

08decbd710c03288a725a4d93bfd0ef0d6eeb400
SHA256

e870ece118f4525d71c9897a277e07070d4c8e8b0a9add97635c2b9f4e6c639e
SHA512

7a8b0758ffcb013d593616874fe09fa2b4dbae8fe61d9891cc722abef2eee4d262af5674b774b720833cf97327e03ed6079c8031cade87de8ebda2f5f4a16880
SSDEEP

96:qHIM/yFqFyVBdSm8PdidFTtCGCJ9O0aQm:rMKFhFF8WTtC9J9Pm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01d13622835e4bd0291bb8d7299a92a9_JaffaCakes118

Files

01d13622835e4bd0291bb8d7299a92a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf284a2b3aa7eb1c3ae0450401a2b93c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
UpdateWindow
PostQuitMessage
GetSystemMetrics
ShowWindow
SendMessageA
FillRect
GetMessageA
RegisterClassExA
MessageBoxA
LoadIconA
LoadCursorA
InvalidateRect
EndPaint
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
wsprintfA
GetClientRect

kernel32

GetModuleHandleA
GetTempFileNameA
GetTempPathA
FreeLibrary
LoadLibraryA
lstrlenA
lstrcpyA
WriteFile
Sleep
CreateFileA
GetSystemDirectoryA
GetProcAddress
ExitProcess
DeleteFileA
CreateThread
CloseHandle

gdi32

SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateFontA

shell32

ShellExecuteA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
HttpQueryInfoA
InternetSetOptionA

winmm

timeGetTime

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE