108213e931c303279116e4999ff2a2a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

108213e931c303279116e4999ff2a2a6_JaffaCakes118
Size

5KB
MD5

108213e931c303279116e4999ff2a2a6
SHA1

08865014a4d718cc005f2bdcd6c09c8408ea6168
SHA256

7b4eccb981a5e6b6c462ed81ce9a7762071d52d7481803c73a6bc0be3a532462
SHA512

c6dd39563195c90b73956134c99cdcd66193382f1875fd09a7059980387b9d77011e990949dc9607f8a54158d294043d5140e12025eeffc6b0db1613ffe3c3df
SSDEEP

48:ZvtnUfCmVeNsqBbCiTUiyLyhBmfDFZR85hHQ7Jsul5ZnlvvnF+IVqHwlUm/OI:Z1UmyqBbCiT9yLWsFQ5hW3nnwajt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
108213e931c303279116e4999ff2a2a6_JaffaCakes118

Files

108213e931c303279116e4999ff2a2a6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

91a660509a048aad39cb90911a24ff4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ExitProcess

user32

RegisterClassA
CreateWindowExA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
LoadCursorA
LoadIconA
LoadMenuA
GetClientRect
MoveWindow
SetFocus
MessageBoxA
PostQuitMessage

gdi32

CreateFontA
DeleteObject

Sections

.text
Size: 1024B - Virtual size: 619B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ