0744c0e2802b51b8712b56a273f2b830_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0744c0e2802b51b8712b56a273f2b830_JaffaCakes118
Size

37KB
MD5

0744c0e2802b51b8712b56a273f2b830
SHA1

bc6de1ae2b9c50b24a3f2ce73c5ae6d23e833792
SHA256

4e88a78f680a149bbd05e7a7a95e329999859843f26aa4d06dccc6840cdf67db
SHA512

b9c8345d41a6e920762ea93558b44f53c61846a80076b62cde1471419ba2aaf7b718929709ad8b833c14c4951d78972d6506bde9a6990fa3cd9b5769f394bd13
SSDEEP

768:/eAyEXwAZ304n7OTBZHfuuLeD2ahz67M:/eA1XwMx7cBsuLeD2ahN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0744c0e2802b51b8712b56a273f2b830_JaffaCakes118

Files

0744c0e2802b51b8712b56a273f2b830_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df0e79d97f00107506f8943f65032731

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageA
DestroyWindow
DialogBoxParamA
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetStartupInfoA
GetModuleHandleA
GetCurrentDirectoryA
GetLastError
LoadLibraryA

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
__p__acmdln
exit
_XcptFilter
_exit
fgetc
fflush
fputc
_controlfp
_initterm
memset
wcsncmp
wcslen
memcpy

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ