065862f0779c595e9a1eef109b9b65ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

065862f0779c595e9a1eef109b9b65ec_JaffaCakes118
Size

10KB
MD5

065862f0779c595e9a1eef109b9b65ec
SHA1

29feaed722f157a1fdecda7b797fa27ed037e3ce
SHA256

a16c76c55a80ad31eca852ef151be36658719e6e119ac0c6f3b52d8de8ce240a
SHA512

e920aa89116d59a68f83268f3d9c6ec2ae022dedd12ceeb2226dcbd5c2b3d7075a7451b36dffe4cda249ab1da15e93789a7198715ba823fa225369df7844324b
SSDEEP

96:EJTQKs+EDhLlN1HAHqatu1qC37/xw+sItQ:EbsVDhhN1gHDtu1Dx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
065862f0779c595e9a1eef109b9b65ec_JaffaCakes118

Files

065862f0779c595e9a1eef109b9b65ec_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a91931c91ec19d87389fae5d6876bed6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RemoveDirectoryA
RtlUnwind
DeleteFileA

user32

FindWindowA
UpdateWindow
SetTimer
KillTimer
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
PostQuitMessage
ShowWindow
CreateWindowExA
DestroyWindow
BringWindowToTop
DefWindowProcA

crtdll

__GetMainArgs
_splitpath
exit
raise
signal
sprintf
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1004B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE