5af3a5793b969bd1279b89856c6b62ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5af3a5793b969bd1279b89856c6b62ab_JaffaCakes118
Size

40KB
MD5

5af3a5793b969bd1279b89856c6b62ab
SHA1

f2650905f2392a9b6e1d337b7f9c102314ce99dc
SHA256

087105f02f8a9b80c50c958b618778c1b96da2c224b3febea87fef80e903b053
SHA512

2d8c7d3ef58df2cd25cbb94910f4b05c6f1d47c17841b8b726fc71bec38c250e44e4612c730977c4b9178620c1346dd89f07f0a6d1a51f2f320532cade6fa67e
SSDEEP

768:ygRh+fUjcKzjv1GK+94VSzmVSaVxddYZ6c4QAsD6XGWqBKBV:yJfUjc+vA94AeptdGbDD6XxqBYV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5af3a5793b969bd1279b89856c6b62ab_JaffaCakes118

Files

5af3a5793b969bd1279b89856c6b62ab_JaffaCakes118
.exe windows:5 windows x86 arch:x86

22f9469c59db1d4369ab5112f6116e7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetTopWindow
ShowWindowAsync
CloseWindow
GetWindowTextLengthA
GetParent
IsWindowUnicode
WaitForInputIdle
GetLastActivePopup
SetParent
AnyPopup
SetForegroundWindow
TileWindows
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE