04e76bb5a6630ff1f41a870d0362986b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04e76bb5a6630ff1f41a870d0362986b_JaffaCakes118
Size

38KB
MD5

04e76bb5a6630ff1f41a870d0362986b
SHA1

d2b4fbb2949242ad7fefeeaa47189695e153d793
SHA256

dbdefeb05aba2ec3df8770127a69a207ccfcd2894ac8221de1325519a6e56194
SHA512

e2a1dfc9258baf223d3013f698141af73f9cf9cf5f83541e535e86dadc55df3ea3cc96ebbcf42989878d1649aadbb6db3818dd7521d7a76a115a59703aa6ca7e
SSDEEP

768:Bdjv9mRl5R+QS7JPj5EiveMIGjwXD8xtk1+DxQk:fgBXINmimhK8cB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04e76bb5a6630ff1f41a870d0362986b_JaffaCakes118

Files

04e76bb5a6630ff1f41a870d0362986b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fea2796b7b994a905bea7eb23e01709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
IsWindowUnicode
TileWindows
AnyPopup
ShowWindowAsync
GetParent
WaitForInputIdle
GetTopWindow
CloseWindow
SetParent
SetForegroundWindow
GetLastActivePopup
GetWindowTextLengthA
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE