15f1cdf189b7ce7bf6b2a5c0124b0cdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f1cdf189b7ce7bf6b2a5c0124b0cdd_JaffaCakes118
Size

179KB
MD5

15f1cdf189b7ce7bf6b2a5c0124b0cdd
SHA1

ec3e7ba10b7940a74b9c844eb7950cafb5b4ec54
SHA256

d6d98ac92aaa54d3a87342ac153b0dc3f6c744845edfb42c1199e331a26b04de
SHA512

6bc5b2ea8b7cb5c14dc2777d25709524a53a512b0c0db0b2b7f8056c28a05e4dfa619a53391853a492024aee41dbe8ef550c72f4144582255d002235ffade717
SSDEEP

3072:TxfO2znw8Ef98S0SUuHKlwwF6S70NYLcZ8ADKA/m56Uam2N93BsJNIH:N5EtKKZtDjm5ABbKJNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f1cdf189b7ce7bf6b2a5c0124b0cdd_JaffaCakes118

Files

15f1cdf189b7ce7bf6b2a5c0124b0cdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b685f9ebd4c3d044604741ab8325b01e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetStockObject

user32

PostQuitMessage
RegisterClassExA
SendMessageA
SetFocus
MoveWindow
SetWindowLongA
SetWindowWord
ShowWindow
TranslateMessage
UpdateWindow
MessageBoxA
LoadIconA
LoadCursorA
GetWindowTextA
GetSystemMetrics
GetMessageA
GetClientRect
GetClassNameA
EnumWindows
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallWindowProcA
SetForegroundWindow

kernel32

ExitProcess
VirtualProtect
Sleep
RtlZeroMemory
LoadLibraryA
GetModuleHandleA
GetLastError
GetCommandLineA
CreateThread

comctl32

InitCommonControls

msvcrt

atoi

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ