1261f21d4e4f2d5a4e45570c999e49b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1261f21d4e4f2d5a4e45570c999e49b4_JaffaCakes118
Size

283KB
MD5

1261f21d4e4f2d5a4e45570c999e49b4
SHA1

7470919d56f1455882e3da995109ac0e4421e2ae
SHA256

c487b6682ca60e6917b2141384c3945f8707b49e21e2d66c224d55e8bdedcd68
SHA512

c07bd667d6375eed2ac2c26667b78ebba38a66c1bbd10d48824ad3dc4890f34e00074d3e31b29b3e0ba06b01befe4de0af2fb0eae8fff0f5700eef9bc58c008e
SSDEEP

6144:c8m+IzOy03Dqjrf9FIiUAk2NMAaJVRcFG0Xo:cN5gDqjrn1UgNxaBG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1261f21d4e4f2d5a4e45570c999e49b4_JaffaCakes118

Files

1261f21d4e4f2d5a4e45570c999e49b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

72664270619db862e17244637fedfd3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardLayout

kernel32

lstrcpyA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetProcAddress
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
lstrcatA

comctl32

GetMUILanguage

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE