25007d4cb4df3743a3918620a7e14fa7_JaffaCakes118 | Triage

Sharing

General

Target

25007d4cb4df3743a3918620a7e14fa7_JaffaCakes118
Size

20KB
MD5

25007d4cb4df3743a3918620a7e14fa7
SHA1

8f948a5bed0dd354bd87936efaf23e7a2a59a232
SHA256

d2960f644e438e178732c88c9a099def3d1004b7628a15357ef1407a1d23d70a
SHA512

9b003c5eca9d7a79d68cf35ad307a7a95ff1662baf886249265fca18fc60da6267b7d372d851586912ccea5599e2f55874c07385127871cb10b6d445645983cd
SSDEEP

384:9cd6w+NomiUBQZVoRiCKKtYh2pNvdAajICjDfLAqjC4l1GBGj0:qIomvQ7oTOUVAaMSEq2W1GAQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25007d4cb4df3743a3918620a7e14fa7_JaffaCakes118

Files

25007d4cb4df3743a3918620a7e14fa7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d212f4856ef91a73d17f9e9cdf7752bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
ClientToScreen
CloseClipboard
PostMessageW
CharLowerW
UpdateWindow
ChangeClipboardChain

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetModuleHandleW
HeapAlloc
GetProcessHeap
lstrcatW
HeapFree
lstrcpyW
GetCommandLineA

comctl32

ImageList_Create
ord17

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ