61b2daf5e3eac176cfc59f5f149e9966_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b2daf5e3eac176cfc59f5f149e9966_JaffaCakes118
Size

42KB
MD5

61b2daf5e3eac176cfc59f5f149e9966
SHA1

99b3877c9e6ec75a523de1fb36d3e94fbf07f730
SHA256

af6ce63f09c877b90084eb06f3ccc355c082674cdeda3cc3fb7ba5e24e4790d6
SHA512

55fda04fd69810e07cf1a07c3c26f8e72ddb6d651f12e0e6677e12b0f69bf09e0238cdf1e0b41d68cddf886fbf8bb964c30c3e4e3852bfa2fa096853bb066edd
SSDEEP

768:AOSd9tAv0YEGI5LWg+W9AfXrAilvINp6NYxKpw4P1xg+vqiq:AH9xYEGGLh+zb9lhNMj4PnXqiq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61b2daf5e3eac176cfc59f5f149e9966_JaffaCakes118

Files

61b2daf5e3eac176cfc59f5f149e9966_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac3301c18a13e07b1ccc97a789ef6331

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect

user32

FindWindowA

Sections

.text
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ