0ef46b01c67c5f59a9ceb3c6345d1eba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ef46b01c67c5f59a9ceb3c6345d1eba_JaffaCakes118
Size

76KB
MD5

0ef46b01c67c5f59a9ceb3c6345d1eba
SHA1

0ecfd98ec12b7c4a6e54b85a5b7347e69c732879
SHA256

43a4424610c07a8c3ebcd4786e3ecafd5d5b7e8dc6da1a22f84b60d51103a857
SHA512

bdf8898f0276e80a632c9cd88d6440a7ae6c4773235e3be1fcb494d7b24347c8fc31b3b82ed850f88927b437ffa976aad4f935fef0ddc25a7723a903a8282734
SSDEEP

1536:dPTNP9zAeEw2Uv4lM5rKbHwsYM24Uf8AGNzzmb:DPJ2phHwsYMo8dNzs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ef46b01c67c5f59a9ceb3c6345d1eba_JaffaCakes118

Files

0ef46b01c67c5f59a9ceb3c6345d1eba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b0c3790bb1880acdbcfb1baee5524c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
HeapFree

user32

GetClassWord
SetScrollPos
SendMessageA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE