8a28c308a64d052dc73c271558bcd389_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a28c308a64d052dc73c271558bcd389_JaffaCakes118
Size

36KB
MD5

8a28c308a64d052dc73c271558bcd389
SHA1

6ed02fcd4877d6c42cc84de69095d2d8a4862edd
SHA256

2548f59fa534769521475d906c8ddad70db4eea4d05b8fa4f5569a83acf3e9a0
SHA512

45dfb4b2893d26579a876e1a286dfaa812472c663654be0d7c02f723ab94b8900d043e70770c85d1fd3b80b01707334e0db760743e34ba8fcaeff4480fd6ac93
SSDEEP

768:YQTjJioCk178ZyIxbuFie8xDl49A70u/ki31xdvdK7U4ZTkWF0gfo+I:LTjJUk172ytFalYAhz1d/4S7Eoj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a28c308a64d052dc73c271558bcd389_JaffaCakes118

Files

8a28c308a64d052dc73c271558bcd389_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a502391f60978446dfa75d8306829447

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetProcAddress
LoadLibraryA

user32

SendMessageA
GetClassLongA
wsprintfA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ