1797cd61da280dcba745fa5d8d9440d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1797cd61da280dcba745fa5d8d9440d8_JaffaCakes118
Size

4KB
MD5

1797cd61da280dcba745fa5d8d9440d8
SHA1

714a41128757929fd67465889f1fecbcc7f51822
SHA256

31d347cf43696dd0d6769f15f501eff5784d09e03b6555db649214d703918a67
SHA512

a79a1da6c760a1b8be541a76fc9849a0be9b1b4368582e4429ee6f4f404706490db7daf32562a9c01e55106384efd599b5656825b4b28b0a5b09d4bb08880e57
SSDEEP

48:aQ+vSSMwftsATZThHTl10Pc/KQ7StXPtboyl1pclbv:7sSwtsCE7PtXPtboynM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1797cd61da280dcba745fa5d8d9440d8_JaffaCakes118

Files

1797cd61da280dcba745fa5d8d9440d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ecbdb21abe80bd2c4e792e9448be4e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__p__commode
??2@YAPAXI@Z

kernel32

GetModuleHandleA
GetStartupInfoA

user32

SendMessageA
DispatchMessageA
PeekMessageA
MessageBoxA
TranslateMessage

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ