3a9512b75f40aaadc62cb102e48a16ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a9512b75f40aaadc62cb102e48a16ee_JaffaCakes118
Size

39KB
MD5

3a9512b75f40aaadc62cb102e48a16ee
SHA1

eaac281b1b57b6310576471172beec7cdf1b6be2
SHA256

bc14c10a9d2e3ae2e50f5bd47330761ffbedb5ca4f977ae3a5a8d88bb3b4a2e1
SHA512

a6e1852c75d0cfeb75f82f989b7c6ad20aff4bd936b0efb14d519269f1830764c309a4f3b094994982cb566e498e17aee0213b7b798ba6f870408d84e55f52a6
SSDEEP

768:F91dZKJxVZ897jK2JlET8OaHnPQ2AZUOtH602DALdAEllz6x6nb:3RIxU97ZYaogOB2DAyE+x6nb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a9512b75f40aaadc62cb102e48a16ee_JaffaCakes118

Files

3a9512b75f40aaadc62cb102e48a16ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

018b3a54ba0c247067429f31ec6b15ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

GetWindowTextLengthA
CloseWindow
SetParent
SetForegroundWindow
WaitForInputIdle
AnyPopup
GetTopWindow
ShowWindowAsync
IsWindowUnicode
GetParent
TileWindows
GetLastActivePopup
IsIconic
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE