2973b428668ced3c9169dfb4504888fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2973b428668ced3c9169dfb4504888fe_JaffaCakes118
Size

57KB
MD5

2973b428668ced3c9169dfb4504888fe
SHA1

713ea030fe644da3e513a87abce93e5a1f2219c0
SHA256

46f64b32eb5e65f7242844e5ba47d389bcf3638e2b322709024e63606184b77d
SHA512

ae9c28ce0c335345322402b090fabb77c3e2bb6f3443b37764a24afa18e117b4e028c02b32bb3fb2a8d8dad770210205bdc441e0c11760b2063a391ce40b0b13
SSDEEP

768:VS8EWQfHhHNz6Bb7Qy9OyZkguDnTl1BeyFWcHren0fJqZGL8mwpdJ9M+po1Quwc:VEWQfJ4BbAwSF1Ue7Xxipz9pKkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2973b428668ced3c9169dfb4504888fe_JaffaCakes118

Files

2973b428668ced3c9169dfb4504888fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8c15be260aad9c127177f888bdda1ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
OpenFile

user32

GetCursor
CopyRect
DrawTextW
GetWindowTextLengthA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 251B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ