0803ca2a050cb6ff3a359d5cb539dbb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0803ca2a050cb6ff3a359d5cb539dbb5_JaffaCakes118
Size

35KB
MD5

0803ca2a050cb6ff3a359d5cb539dbb5
SHA1

9e7d8bdfc82d79412a51b56ab46110c94c0e48bc
SHA256

8fd2e505907f22964676aa5bdd41712c2428644f395baba11f1c62fea0e09e22
SHA512

ad9667ead4696ba0eae2360e0e32771687086c076def675f4164ebc52944d6ad9c63ce594e88423cb571c7725f21cd83fa01bf18a0b51cc4ae5423b1c2ff9036
SSDEEP

384:x9RlQG13BLgexxxaR0O834rfmAT/5bcicoAVmaqsj7T0oY7cQ67oJk1Ziwf6hyct:TQGpmes+olciha/sw8cF6srxLwN97jX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0803ca2a050cb6ff3a359d5cb539dbb5_JaffaCakes118

Files

0803ca2a050cb6ff3a359d5cb539dbb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8c5aee3de0affe7b6feb7a975919652

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject

user32

GetWindowLongA
GetScrollInfo
GetClassLongA
SetScrollInfo
KillTimer
InvalidateRect
wsprintfA
GetForegroundWindow

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ