409ba91d7ab41709811d2c8b8e2e022b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409ba91d7ab41709811d2c8b8e2e022b_JaffaCakes118
Size

33KB
MD5

409ba91d7ab41709811d2c8b8e2e022b
SHA1

1ebdc1cb42f53b41387a8c6c6543714b17763325
SHA256

a994167767fea3e6cdd3d32d5abbd473ba0fc883021d221d5b8d238306d97dfe
SHA512

a63f199f02a9f2450203525d14db3a35cdc8cb11db83919cb47eb4fe2852deb59056bc0a7407cf0333645cbb8e312e815f297c927966ce0ea6ba66529f1c8b93
SSDEEP

768:fEkugsXiKSFvdXaTXbF5AucQtN6VX9dKN+Aq3Y8wsbaZRl:fPNFXCR6UON6F8Parl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409ba91d7ab41709811d2c8b8e2e022b_JaffaCakes118

Files

409ba91d7ab41709811d2c8b8e2e022b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a584dd4cf4147ceeef5c695ee94c58ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess

user32

BlockInput
CharPrevExA
CharUpperBuffA
ChildWindowFromPoint
CreateDialogParamA
DrawEdge
DrawTextA
EndDialog
FillRect
GetClassInfoExA
GetClassLongA
GetDC
GetNextDlgGroupItem
GetTopWindow
GetWindowDC
InvalidateRect
OpenInputDesktop
PeekMessageA
RegisterWindowMessageA
SendIMEMessageExA
SendMessageA
SetDlgItemInt
SetFocus
SetShellWindow
SetWindowTextA
ValidateRgn

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 778B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ