541117d2a5a247d6f763f0494fedcd4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

541117d2a5a247d6f763f0494fedcd4f_JaffaCakes118
Size

20KB
MD5

541117d2a5a247d6f763f0494fedcd4f
SHA1

74bf5d5e5f0b9c6dc44cb144c3aad1e9eab96c9c
SHA256

12e5bc2c6a9ac1c18a78eaef6943af64dda3da13d29550d877cb8b1b71f63176
SHA512

e216b2339e9c7e8d1cd862cea7ca159bd84c6b9a375a6432dcb6394b1f4d74731908ea8c96ba228eaf3e03f98cb57eefadb708ceb53ca1be69cf10945f27e888
SSDEEP

384:s371YF2+HNOcTmfQxCRKQc+Tl1LlxECEsV9aaFlINgp04tq9QW:sLd+BIQxWKQfJxnEuwPNg8QW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
541117d2a5a247d6f763f0494fedcd4f_JaffaCakes118

Files

541117d2a5a247d6f763f0494fedcd4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c37730af172bf1f391bc4e045f9d646

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
ExitThread
GetLastError
GetModuleHandleA
GetSystemInfo
GetVersionExA
LocalAlloc
WaitForSingleObject

user32

BlockInput
CharUpperA
CreateDialogParamA
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndDialog
EndPaint
FindWindowA
GetAsyncKeyState
GetClassInfoExA
GetMessageA
GetSystemMetrics
GetTopWindow
LoadCursorA
LoadIconA
MessageBoxA
RegisterWindowMessageA
SetDlgItemInt
SetFocus
SetWindowTextA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ