6975edbe5e5649d317f1b8bac0bb9730_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6975edbe5e5649d317f1b8bac0bb9730_JaffaCakes118
Size

36KB
MD5

6975edbe5e5649d317f1b8bac0bb9730
SHA1

037fc0969f718c262e10a7da635c2c8597b1fcc1
SHA256

c5cf6c516ceb2b7a34cc13c81ef89625031635248f123a274bcfa3829a574e56
SHA512

2a8783c0b972051e6d18d52b6c6cf9f7597623379a8d8b1058f9675577032b0aeb9b58ffbe1d54828197ed475bec030372f1d6614e95745ab867b859dd42c399
SSDEEP

768:hpP+HpeS7jXS6crhViN5EqKapgAvR7ulzCbZ/G86gE:G77jN5ihOvTZ/16g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6975edbe5e5649d317f1b8bac0bb9730_JaffaCakes118

Files

6975edbe5e5649d317f1b8bac0bb9730_JaffaCakes118
.exe windows:3 windows x86 arch:x86

8627e2bb8a87b81ef6679d65b3963eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalLock
GlobalUnlock
ReadFile
GetModuleHandleA
GetProcAddress

user32

GetWindowDC
SetActiveWindow
GetFocus

gdi32

EndDoc
LPtoDP
SetMapMode

Sections

PESEC0
Size: 226B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PESEC1
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 459B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ