839cf4ab47f314aafcab95af4b3c8423_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

839cf4ab47f314aafcab95af4b3c8423_JaffaCakes118
Size

36KB
MD5

839cf4ab47f314aafcab95af4b3c8423
SHA1

9ac2385a09d0451f3b1965352abfdb01f79a2539
SHA256

e60c84f61a18677083f58c5073a45eaf22241fc6c3e989f18af8c25fa35a798e
SHA512

51a8178ce5fbd43c32273997ae670ba09da30ea02a4c05c4f91562f3da82fc66312b8cde35d2afa471cb6645ed0c9b8b2d7afe636c849bc8a680037d9a1f8b1b
SSDEEP

768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578Nkbe:h8wyJnYEOH9ZqDw8h3bzPD2mee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
839cf4ab47f314aafcab95af4b3c8423_JaffaCakes118

Files

839cf4ab47f314aafcab95af4b3c8423_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c539127eba3e0c62aaacfdb270652c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

MoveWindow
SendMessageA
SetTimer
GetClassWord
wsprintfA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ