42bd14baef9db5d40b24579442de44c5_JaffaCakes118 | Triage

Sharing

General

Target

42bd14baef9db5d40b24579442de44c5_JaffaCakes118
Size

39KB
MD5

42bd14baef9db5d40b24579442de44c5
SHA1

9576038c3486865c97c8b2d81658ebecf54e2649
SHA256

a31ff52f945d5fabbfe58190078464966ae01023fcd861566c8524039107b0ba
SHA512

47b1ef437459337a6a45fdf1e8cbdf070fe8684e5e152785245cd725fe9e336611ffae83ba4b46dc2021502566f7589f1da57c7bdc7bb3d91099ce2fc07fd8b9
SSDEEP

768:F91dZKJxVZ897jK2JlET8OaHnPQ2AZUOtH602DALdAEllz6x6nr:3RIxU97ZYaogOB2DAyE+x6nr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42bd14baef9db5d40b24579442de44c5_JaffaCakes118

Files

42bd14baef9db5d40b24579442de44c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

018b3a54ba0c247067429f31ec6b15ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

GetWindowTextLengthA
CloseWindow
SetParent
SetForegroundWindow
WaitForInputIdle
AnyPopup
GetTopWindow
ShowWindowAsync
IsWindowUnicode
GetParent
TileWindows
GetLastActivePopup
IsIconic
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE