5d82df57569e7c819d7b9b93781c4766_JaffaCakes118 | Triage

Sharing

General

Target

5d82df57569e7c819d7b9b93781c4766_JaffaCakes118
Size

38KB
MD5

5d82df57569e7c819d7b9b93781c4766
SHA1

1fd1a04a677c0d372b7fe5272bf9f534c57d9bec
SHA256

c9ad2c239ea787a2a5dd432f90d2e36d2160827d44307ebb433c52534ee86a6a
SHA512

aaad53b9b0ec0c4d70259802ddf9a7c29f5868dad7ee9074a316b86b5b62eca43be27331afde09f1dd31c8251c6659007e78af6aa373fe7046735f2467d343d2
SSDEEP

768:EoGBwgQ9xh7miRJsKue84EZ43eX/rUI/w9bbVAAtFPoIlan8n:EoGBwgc7miL85ZGWQIohZAAfm8n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d82df57569e7c819d7b9b93781c4766_JaffaCakes118

Files

5d82df57569e7c819d7b9b93781c4766_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e1048df170a525bae12059b67d988f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetWindowTextLengthA
GetParent
GetWindowLongA
GetForegroundWindow
CloseWindow
GetClassLongA
GetClassWord
ShowWindowAsync
TileWindows
GetLastActivePopup
WaitForInputIdle
IsWindowUnicode
SetParent
AnyPopup
GetTopWindow
SetForegroundWindow
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE