6f7a4beb4e38d8d08de1872bbf0de79a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f7a4beb4e38d8d08de1872bbf0de79a_JaffaCakes118
Size

36KB
MD5

6f7a4beb4e38d8d08de1872bbf0de79a
SHA1

0e995d09a305ee8793e62e88f7cdcea9c30e206f
SHA256

2dd243595624c749db1f1e116198d260babd63c3839c71b5c3df992dfada7f4e
SHA512

9d9d62c2f1e181f25002e6d4d692980e7dd3115ea56a3fce931c15fcfa931f76fd33b7c4733825eae62515ffa3aaf2aee1a65b9bf44f2127474155660267ebf0
SSDEEP

768:fOhogMyPIELUndT0eqCBjrQ1P4ovUf4s+fObfQTjiwFP8e6R:fORwmUnZqOE+df4b+UUec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f7a4beb4e38d8d08de1872bbf0de79a_JaffaCakes118

Files

6f7a4beb4e38d8d08de1872bbf0de79a_JaffaCakes118
.exe windows:3 windows x86 arch:x86

8627e2bb8a87b81ef6679d65b3963eb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GlobalLock
GlobalUnlock
ReadFile
GetModuleHandleA
GetProcAddress

user32

GetWindowDC
SetActiveWindow
GetFocus

gdi32

EndDoc
LPtoDP
SetMapMode

Sections

PESEC0
Size: 226B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PESEC1
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 459B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ