ed6f16022b78068e6b3a981a059591bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed6f16022b78068e6b3a981a059591bb_JaffaCakes118
Size

34KB
MD5

ed6f16022b78068e6b3a981a059591bb
SHA1

490ca69436cd0b13580f60738c71708a511d5fd4
SHA256

1729747293abe614e6f1c97ab08c819c26ae82f42d74376333b87215227e2395
SHA512

f94c36e4f35e7558fadd2c1db0201dd28c25cde321173f4a7106b96552c6cb1c22204ac18f5fbee43aeeed9066b3442b02030eab33ab9f3efb4afbaf88431507
SSDEEP

768:ksYcI18QEdR6/1uixIROstI3auUjf9rxsW93yc1Ln7EnZ:ksZ+0GS8sgkjfI2EZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed6f16022b78068e6b3a981a059591bb_JaffaCakes118

Files

ed6f16022b78068e6b3a981a059591bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

807a84a0f7bbf1ec8a851fc0871a5a05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
HeapDestroy
HeapFree
HeapCreate

user32

EnableMenuItem
SendMessageA
OpenClipboard
SetWindowLongA
GetClientRect
LockWindowUpdate
CloseClipboard

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ