JaffaCakes118_a491b24a3c210e20cb1aa80cc2291955 | Triage

Sharing

General

Target

JaffaCakes118_a491b24a3c210e20cb1aa80cc2291955
Size

2.0MB
MD5

a491b24a3c210e20cb1aa80cc2291955
SHA1

fc288d367fe581e0538a4a20ea4b2c6671ddc29a
SHA256

0042904bde2751113928cf97783b2c83918287adb922965385f5a330c810a8ff
SHA512

62144581ed8a7b0472eb5ffbdb7a77f234a477f8aafa7e54b146ce4be473214d3c674e9c1d42d9da23cbb5693c8049126af9b627655532b01aef02ab29af3509
SSDEEP

49152:hDdiWQUCI9O/BMy3Zbg5gOssSKLiHBxPrp7P2EnDkF:RdiLI9Xy3ZburssS02BxPNqEna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a491b24a3c210e20cb1aa80cc2291955

Files

JaffaCakes118_a491b24a3c210e20cb1aa80cc2291955
.exe windows:4 windows x86 arch:x86

5f2df7257758bf2707e2911007001ebd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateThread
LoadLibraryA
FindResourceA
GetModuleHandleA
LocalAlloc
LocalFree
GetCommandLineW
GlobalAlloc
GlobalFree
SetEvent
CreateProcessA
ExitProcess
GetTickCount

user32

GetClientRect
GetWindowRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowWindow
UpdateWindow
CreateWindowExA
LoadBitmapA
SendMessageA
DestroyWindow

Sections

.text
Size: 1.6MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dyamarC
Size: 375KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dyamarD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ