56ca39fc19523fcbdf64ca671fb7ca26_JaffaCakes118 | Triage

Sharing

General

Target

56ca39fc19523fcbdf64ca671fb7ca26_JaffaCakes118
Size

79KB
MD5

56ca39fc19523fcbdf64ca671fb7ca26
SHA1

d011fe070a2032858ff092b53b527d01780228da
SHA256

9a93f42702195253139460e3c6372fa547e8c2907d22d1f81082655733db8baa
SHA512

91141019eb71abfa045206422beef23da23bd4c8e58fa5a5d77c2a307789b170300a3fb227987e889613695b23383ee43479ec6b250020dd9c67281d8a640ba4
SSDEEP

768:wewuF1vGbzzHWqCPGAG97Z1+bU7qa70q7144Xg5wAP66R5ytzlfmndMr7XJVwO3m:X1F0HCK1+bU7x7qwASekNsd0JKO35Y9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56ca39fc19523fcbdf64ca671fb7ca26_JaffaCakes118

Files

56ca39fc19523fcbdf64ca671fb7ca26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f0964f7d12948ade7e4347cd8aa57bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
GetProcAddress
LoadLibraryA
CreateEventA
VirtualProtect
LockResource
LoadResource
FindResourceA
LocalFree
VirtualAllocEx
GetCurrentProcessId
ExitProcess
GetComputerNameA
GetModuleHandleW
GetModuleHandleA
CreateMutexA
ResumeThread
LocalAlloc
GetCurrentProcess

user32

GetActiveWindow
wsprintfA
FindWindowA
GetWindow
ShowWindow

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ