34a0f4cfdb0f611b7fea3a5fdfe2dfaf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34a0f4cfdb0f611b7fea3a5fdfe2dfaf_JaffaCakes118
Size

40KB
MD5

34a0f4cfdb0f611b7fea3a5fdfe2dfaf
SHA1

29013b95c0f75554879910811010cdc3f468b6c8
SHA256

c9e4311425a8fa99a8f6a185d30c898094dd7ba0b8c5a827da4178b6ad7bb309
SHA512

de679abb07ed7c2b4408417be066be5bb6a562e729378a04325621654f94df403d90ad51d48cd24bc9bf4cce9b4c2c3bb3edd371b192dc58e4ffc3eeba176481
SSDEEP

768:JqvumNbHxgEFe1Ah34hC6qwrv2Nr8HJKauHpkV/ZoijO0cq2EsbK:J0NbRgEF8g4HONrS0auHpk9ZogO0nhsG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34a0f4cfdb0f611b7fea3a5fdfe2dfaf_JaffaCakes118

Files

34a0f4cfdb0f611b7fea3a5fdfe2dfaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bf004ca8afc7cfb5f7da41bbc75d31a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetProcAddress
LoadLibraryA
HeapAlloc

user32

SetTimer
SendMessageA
GetWindowLongA
GetForegroundWindow
GetClassLongA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ