55b7a29d4498a64e94e02c6332809a4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55b7a29d4498a64e94e02c6332809a4e_JaffaCakes118
Size

38KB
MD5

55b7a29d4498a64e94e02c6332809a4e
SHA1

cd1b3dfd20659dbd53151b5499369dbb70bf696e
SHA256

0eb368c77bf9f55960c328e4b9b532ddb65d6dac8c056130acaf132f77fb1778
SHA512

4c27286f72590fa86e0598cdb8bf01d59f303a600fd99c4a686227508021a99fdb6f0450db428d7591def60bef3e8b5c2fe1490199ee28763f9e854680f623ac
SSDEEP

768:Dcn8DU6wDzz+snz6qZbOWxMvtFEgNuGiLmRv:DciU64+sz6qZbYPjcGiLmRv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55b7a29d4498a64e94e02c6332809a4e_JaffaCakes118

Files

55b7a29d4498a64e94e02c6332809a4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61d5157f53f6deabbf26418e4502958b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetProcessHeap
HeapDestroy
HeapFree
HeapCreate
HeapAlloc

user32

KillTimer
SendMessageA
ScrollWindow
SetWindowTextA
BeginPaint

gdi32

DeleteObject

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ