JaffaCakes118_7ab423a0c3c7eeb3bb00d130e6b6f9bd | Triage

Sharing

General

Target

JaffaCakes118_7ab423a0c3c7eeb3bb00d130e6b6f9bd
Size

608KB
MD5

7ab423a0c3c7eeb3bb00d130e6b6f9bd
SHA1

23ecc0bb28e5c69b5a07cd215e34b2459ffa7f4e
SHA256

209b685ffe19683bfa33f9bb813abe69fd7df5d7260e186d09189d0764b61b5c
SHA512

dc2061ac9a1e7573348ac49514a6c905f3c756e4d5a366001ca76bb604e92f03fe4e967f65f843c82397e74cce938b32cc08261e9b193a91bb58270d291da93e
SSDEEP

12288:52u4sum+hlTEqUZoYX+KdC3R+kFifVucd4lJO2oT+VC/:pKmGlTEZo8eRpFifMK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7ab423a0c3c7eeb3bb00d130e6b6f9bd

Files

JaffaCakes118_7ab423a0c3c7eeb3bb00d130e6b6f9bd
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 356KB - Virtual size: 628KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ