JaffaCakes118_b8b56401ea79643f428847bfe2be5b25 | Triage

Sharing

General

Target

JaffaCakes118_b8b56401ea79643f428847bfe2be5b25
Size

65KB
MD5

b8b56401ea79643f428847bfe2be5b25
SHA1

1ead1f06ffdf21b7e1262255b85ada089ab715ea
SHA256

d12ee3db69b06b07f617cc7f32b4c14b54575cd9751bfbc2d8f4d667520f91e3
SHA512

f09c8d5c1ea8bf089bb33a3296fdfff5d99319628760f032f6e93fe414b385f0efd2fc2108c306c4aa33eb9bd1ca612e6494aad063721db8d26f4a6696d2a172
SSDEEP

1536:jFZ6qSjJMUzA4w+x57r98zbgSTDK6lKBnMX7FI/9Puo9U:GTJMUzJNq5GrBMRI/92om

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b8b56401ea79643f428847bfe2be5b25

Files

JaffaCakes118_b8b56401ea79643f428847bfe2be5b25
.exe windows:5 windows x86 arch:x86

529fefb783dcbb3b9f5baf618b34237d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveInReset

msimg32

TransparentBlt

kernel32

ExitProcess
GetCommandLineA
GetStartupInfoA
lstrcmpA
Sleep
OutputDebugStringW
CreateProcessA
lstrlenA
HeapReAlloc
HeapAlloc
GetProcessHeap
GetTickCount
GetModuleHandleA
OutputDebugStringA

user32

DefWindowProcA
ShowWindow
CreateWindowExA

gdi32

SelectObject
GetObjectA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ