61c503c21bc2a9e9b35e6e0c8339bc4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61c503c21bc2a9e9b35e6e0c8339bc4a_JaffaCakes118
Size

35KB
MD5

61c503c21bc2a9e9b35e6e0c8339bc4a
SHA1

f978218248a4545c91e413b1473aff4e5631cf79
SHA256

0d7bfc5a48f84ca52424b4cc2a5c50b40c0b0bf300b625df193feef60cc7fc5a
SHA512

f7fa20394b66f4aebd5990bab8b019ed608d8b30c46376936fa7fa43db77802ec0ac69142d2ddeb11636232b0543bd69c2bc9c91d06292c7e739bfeda1a90d3e
SSDEEP

384:x9RlQG13BLgexxxaR0O834rfmAT/5bcicoAVmaqsj7T0oY7cQ67oJk1Ziwf6hycS:TQGpmes+olciha/sw8cF6srxLwN97jw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61c503c21bc2a9e9b35e6e0c8339bc4a_JaffaCakes118

Files

61c503c21bc2a9e9b35e6e0c8339bc4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8c5aee3de0affe7b6feb7a975919652

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject

user32

GetWindowLongA
GetScrollInfo
GetClassLongA
SetScrollInfo
KillTimer
InvalidateRect
wsprintfA
GetForegroundWindow

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ