2347444073acac2a80746c9c43629a4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2347444073acac2a80746c9c43629a4d_JaffaCakes118
Size

135KB
MD5

2347444073acac2a80746c9c43629a4d
SHA1

5ab741fe79ce9c34ab47c5e87daa2cd184d3b6b0
SHA256

3d347eb07a5461f65349a727f4cd56ccfec5b57f5a6bfad1b17c545917121cb5
SHA512

39aba9015b40a0201f5b3e275ad67712f241da135970f34793586c65da30484c19cc7bb76f4619add48519b6ad5c14ff8d1e8cdfa88f07e108cc6bd1729ceaf4
SSDEEP

768:XvLe/a/aM2loUoBs3hcWhtDnamIuf+ezRpWHo7Od85w:XGa/aZloUhhAmFW+7OW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2347444073acac2a80746c9c43629a4d_JaffaCakes118

Files

2347444073acac2a80746c9c43629a4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94b54113af1cc9f2f9665ea633c71181

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
lstrcmpiA

user32

GetWindowLongA
GetWindowTextA
GetWindowTextLengthA
EnumWindows

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ