f19d9aa6cdc7897fcb364af518d20279_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f19d9aa6cdc7897fcb364af518d20279_JaffaCakes118
Size

109KB
MD5

f19d9aa6cdc7897fcb364af518d20279
SHA1

25087cd1c70ed995a69156e2e267c969d054b0d8
SHA256

b35b07fa1373ba2fe3c24d6fbba0f709b7b2c0f96c31c85101233f3cda869169
SHA512

0ea58fd469993bda8e0d4d3ef38527187ed11f0ae0c36fdc8f19eba59814889d7227f42298fc82dc2a124db1d9873037fd6def3d02092c248d251f9541d098dd
SSDEEP

3072:1JrukRSYsgu7aK2FQnuLc2lxfzVGN+5nLvBpTZ9:1okRSeu76Q+c2/fzcwLBpTZ9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f19d9aa6cdc7897fcb364af518d20279_JaffaCakes118

Files

f19d9aa6cdc7897fcb364af518d20279_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5252ae45814eb02d5c32d61e95795c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
WaitForSingleObject
HeapAlloc
GetProcessHeap
VirtualProtect
WaitForSingleObjectEx
HeapFree

user32

GetWindowLongA
GetClassWord
ShowWindowAsync
IsIconic
GetForegroundWindow
WaitForInputIdle
GetParent
SetForegroundWindow
GetLastActivePopup

gdi32

GdiFlush

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE