16c238fa9b9b0be6fe3286e9c61b1bf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16c238fa9b9b0be6fe3286e9c61b1bf1_JaffaCakes118
Size

32KB
MD5

16c238fa9b9b0be6fe3286e9c61b1bf1
SHA1

3ec47b7d12c700354e959ab78dfb6c00d10fc220
SHA256

dd74b81d067ae4a3afda547967d2f6531fd56b1b62a5ab8591251f451f3f7c73
SHA512

caa706b2b45863dda29a8c539fe3904f774389abab29086e05dcb1d481c295b62e3acfc54ffc391fc6e5c8cca1f8831bf6d103725b95b320ce655e3b76bc7dc6
SSDEEP

768:Ez0732kIzDKVxa+yAaYFqgjqcPzxiGurAROfpTC+BKctN:p32kKK++ybYZDSARU29c/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16c238fa9b9b0be6fe3286e9c61b1bf1_JaffaCakes118

Files

16c238fa9b9b0be6fe3286e9c61b1bf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30312b184a0c882f4ca30e71f56ed7ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
Sleep
ExitProcess

user32

BeginPaint
BlockInput
CharLowerA
CharUpperA
CreateDialogParamA
CreateWindowExA
CreateWindowStationA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
FlashWindow
GetAsyncKeyState
GetClassInfoExA
GetTopWindow
GetUserObjectInformationA
MessageBoxA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 868B - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ