094d4e24ee00470d71f2295bbc42291d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

094d4e24ee00470d71f2295bbc42291d_JaffaCakes118
Size

174KB
MD5

094d4e24ee00470d71f2295bbc42291d
SHA1

0c52aa78cff1aa70c8f00c7edf39671c1a5e5e1a
SHA256

6cdbe1bc940e25f031205f0d22963f7fd72b18235d42aa40dca6b775514e84b4
SHA512

5b80f985b4aa9a8aa03569f178f485c4f225d1665ab7ca38df1f4c7128cff9ef2ae9b54abc98b7960eb942acde4322350324dd89a5f3d86107208d59d49ccd77
SSDEEP

3072:uhv04Z+jPAfiuaeEEmbwvYEtWTs55MY4JTu1xZDuQxM5iC8/3qSeW/:sv04Z+j3e48QEtmxYEK1xZK4MMC8/3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
094d4e24ee00470d71f2295bbc42291d_JaffaCakes118

Files

094d4e24ee00470d71f2295bbc42291d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5af3db5ec6f1dccb224c74c4095641ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Folder of Working Project\ProjectTest

Imports

user32

DrawTextExW
SetRect
ShowWindow
SetCursorPos
SetWindowTextA
LoadIconA
GetDC
IsWindowEnabled
RegisterWindowMessageA
GetScrollPos
GetKeyboardType
SendNotifyMessageW

shlwapi

PathAddExtensionA

kernel32

CreateWaitableTimerA
HeapUnlock
lstrcpynW
SetFilePointer
lstrcmpA
OpenSemaphoreW
CreateEventW

Exports

Exports

_ExitWindowsExExitWindowsEx@0

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ