11dd703f57eaffcc2b4c418de894d2a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11dd703f57eaffcc2b4c418de894d2a6_JaffaCakes118
Size

660KB
MD5

11dd703f57eaffcc2b4c418de894d2a6
SHA1

26b9b0bc277861f6a5b33b467db99dbb08d7b996
SHA256

c955f9ac679aaf183ed4c06febda802fdb85db595a4b0341a3fa31fd01ce16d2
SHA512

3b531aaf1022cad38f37df0036466431b7415af3b038f0970d280763c33dde1e0dd64a396a3797031ca6b2f4f3352b1a435a5e1503d424ba029d910457e4ff15
SSDEEP

12288:3eFr8MQ/aUwX9hNVZSRI16LTsIWNRqg8ggve:3eFZQ/6lSCAQjGggve

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11dd703f57eaffcc2b4c418de894d2a6_JaffaCakes118

Files

11dd703f57eaffcc2b4c418de894d2a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 31KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dyamarC
Size: 592KB - Virtual size: 868KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dyamarD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ