126edfef92935034d2e6f543aa261ed7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

126edfef92935034d2e6f543aa261ed7_JaffaCakes118
Size

20KB
MD5

126edfef92935034d2e6f543aa261ed7
SHA1

e55ccf480a4062d3b9c4c4aec0fdbb5f24f868f6
SHA256

d291209fc9b444c4571c923481f96a549fb494b583e1f554281010f2b3313512
SHA512

cb11b97fa2db6ed0bcaa4912e3e0992038257d5ff0e6eba4c69fe580f363ca56d702de74c94b09fc1b8600cb57d1fa881f45a409d22f7d8d7015d1f6fe48fdf3
SSDEEP

384:++Q48nR2kRU1U3+aem/ZrMMzfyComJxEbNK2ameHA6G2yEQCJNRy:Ptx45MMzVoK4Amf2yfCJNRy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
126edfef92935034d2e6f543aa261ed7_JaffaCakes118

Files

126edfef92935034d2e6f543aa261ed7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3f2e0e8a2aaa3edb9f9b6ab55758582c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
SetUnhandledExceptionFilter
GetCurrentProcessId
GetModuleHandleW
GetTickCount
GetModuleHandleA
GetModuleFileNameA
LocalFree
SetUnhandledExceptionFilter
VirtualAllocEx
GetCurrentThreadId
SetEvent

gdi32

GetTextMetricsW
DeleteDC
DeleteObject

user32

LockWindowStation
GetWindowRect
GetDlgItem
PostMessageW
ShowWindow

Sections

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ