0c51f09642aa98ae01436c3068fdfa08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c51f09642aa98ae01436c3068fdfa08_JaffaCakes118
Size

122KB
MD5

0c51f09642aa98ae01436c3068fdfa08
SHA1

6d8f1fa0f7ea48eb7f14e70db100248385fe2976
SHA256

7e225500ac775960f7da7bdc0fc33826e26097b05ba3457160a3be1a939dcd75
SHA512

7824998e8a382d81255061f1aac4272c26220abd6757e19d53e1575962324128c1f04e0a31f738f15b2c70962a1dbf4d3bfc62702cb5f9dc11b4a325f8a878fc
SSDEEP

3072:Yw7P5vdshUORpvFypIlDQR3j2mxPg0Rtfte73ki+:l7nsyOR9spADQR3JFRuk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c51f09642aa98ae01436c3068fdfa08_JaffaCakes118

Files

0c51f09642aa98ae01436c3068fdfa08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39993322c42e2eddb5f1fc4dffa12327

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetTickCount

user32

GetWindowLongA
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ