776192c795c7bd953e8045cec0cdcfc0_JaffaCakes118 | Triage

Sharing

General

Target

776192c795c7bd953e8045cec0cdcfc0_JaffaCakes118
Size

13KB
MD5

776192c795c7bd953e8045cec0cdcfc0
SHA1

4dab0397a8b684912504bbcb40768446538b8fee
SHA256

c7d3f07682384e6aca58d3cad257ee7d4595507d82fca614c3e51fa9d633ad38
SHA512

e0c7c306b53ae1665f437168d588f1be7c4f3bcb5b300796a11e2e2f45b9f11ca213632270187731b1bdf5f7fb2c1dd05a8288c9761e804bb5234e207e8e9ff3
SSDEEP

384:r/OjRXN2I46XvP0POd8dhMrnPliQerNc:bc/X0POVT9reJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
776192c795c7bd953e8045cec0cdcfc0_JaffaCakes118

Files

776192c795c7bd953e8045cec0cdcfc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d9fb725f0c743f025dfdfbec776d854

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetForegroundWindow
wvsprintfA

Sections

.text
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ