10cd164ff1557932b00bbcc34910f386_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10cd164ff1557932b00bbcc34910f386_JaffaCakes118
Size

6KB
MD5

10cd164ff1557932b00bbcc34910f386
SHA1

07a1112c6068e9a5e92aaa239eedb400be7a6ebf
SHA256

af7ceb1bd25c577fa6efe2a3b8289d1314b0c40037cfe2a34bc9c6e7273772ad
SHA512

26e264e942274017a3fcfd6d093c3df3717c2852ef2b66579aa3bcd74c47ce0507b1356368e38ca4ad66418a1daadb07a48b8381e2a05e2155d2500db9e8148e
SSDEEP

96:NnFUGicEeM3bVLh1ug28gn+nWUEvrU/1aETkKD9L:NnFUG3El3bVLh0g4noEv6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10cd164ff1557932b00bbcc34910f386_JaffaCakes118

Files

10cd164ff1557932b00bbcc34910f386_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2aef9cc940732f59528149b9339acce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
lstrcmpA
lstrlenA
OpenProcess
WriteProcessMemory
CreateMutexA
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetLastError
GetProcessHeap

user32

SetWindowTextA
GetDlgItem
LoadIconA
SetFocus
EndDialog
DefDlgProcA
LoadCursorA
RegisterClassA
DialogBoxParamA
SendMessageA

comctl32

InitCommonControlsEx

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA
GetModuleInformation

Sections

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ