2798849ccd8e34465aa48db490d58210_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2798849ccd8e34465aa48db490d58210_JaffaCakes118
Size

33KB
MD5

2798849ccd8e34465aa48db490d58210
SHA1

b66bdc77efc287ec51caf1d79d772969164ec816
SHA256

1798af5d53c68191e3eab7310e15b586ce26cad66e334483cdd7260ea2f5afda
SHA512

5e74cf106654a5fd748139082775ec6bdb618cf6ff4d7477d379505966deeadd5095bc4dd94094dbaa85fc49287e77067551250816bdea8fb8e27139534cca80
SSDEEP

768:jWWneUZBwp7GJSQbduxxIygDnuKmqhZNwfdka9tpAu:jVLw1GJPIxIyenuKWfdka9tmu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2798849ccd8e34465aa48db490d58210_JaffaCakes118

Files

2798849ccd8e34465aa48db490d58210_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bf247c5211a45430f9166d15eeb7423

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject

user32

SetFocus
GetWindowLongA
GetForegroundWindow
InvalidateRect
wsprintfA
GetClassLongA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ