47a7963c041d9d6dc0c6c244f6fe6a11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47a7963c041d9d6dc0c6c244f6fe6a11_JaffaCakes118
Size

43KB
MD5

47a7963c041d9d6dc0c6c244f6fe6a11
SHA1

02617b5de788a556671504037d42b514e7d33f33
SHA256

ef01d60be1157c2a74a5ccab22291cabb7f6fcb404eb7a2942409de69f97bf0a
SHA512

465747cc8d201afad65536d0ab813e224ad5a57b9d02f9a31dceadf68902cfe74bbd0232eb4855a66286893cb869ef8e7fae7504afe77824a4c5c33b8ede418c
SSDEEP

768:RkMWBrK6yEGq2+Lm3H+Uxu3Is95ZYPv98HoMUgcdOo2oo3tL5aIAY1Tdx0RjtE1D:RkZelq2cBUxm95ZYPv6wO/l5acFX0ltC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47a7963c041d9d6dc0c6c244f6fe6a11_JaffaCakes118

Files

47a7963c041d9d6dc0c6c244f6fe6a11_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f143eecfeffb649592de3d13dcfb47a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
CloseHandle
ReadFile
SetFilePointer
GetCPInfo
GetFileSize
GetModuleFileNameA
HeapAlloc
GetProcessHeap
VirtualAlloc
GetProcAddress
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
LoadLibraryA
CreateFileMappingA

user32

GetDesktopWindow
GetClassLongA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ