0f3a9f24b1496c45a8d8e7b988bbf126_JaffaCakes118 | Triage

Sharing

General

Target

0f3a9f24b1496c45a8d8e7b988bbf126_JaffaCakes118
Size

14KB
MD5

0f3a9f24b1496c45a8d8e7b988bbf126
SHA1

0a630200c05dcad7a348e39e8ae764d60332b7dc
SHA256

66a4e323bc5add1b1cbaec4a7e25d7e069983c0969fa7a327e8bd3f2d612b580
SHA512

e75e583e775bd8127ca6b654e0f0448a5fc3d98f2a0631a4043fcc9e4a38581866b5d44e9ded10a74eeef92c374c472bbf87ea306a6be559ac08a1d15eb55fd2
SSDEEP

384:vPD6wpTMfF/WlWXacuw2prVFkW1gCcfGD:vPDDTYWEXacuw2phJww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3a9f24b1496c45a8d8e7b988bbf126_JaffaCakes118

Files

0f3a9f24b1496c45a8d8e7b988bbf126_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a38f12291317f4e9048cc1088343c73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
GetLastError
CreateFileA

user32

FindWindowA
CreateWindowExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ