8de98d62c9af00875e5b097b8249c965_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8de98d62c9af00875e5b097b8249c965_JaffaCakes118
Size

92KB
MD5

8de98d62c9af00875e5b097b8249c965
SHA1

b7c38ff001214d92579d9fdeb979c1be377a3e90
SHA256

50b9d4dbe25c57fb5d9af4761b450b490b5f5e03942620494dc6a34a44d09553
SHA512

60610ac07339d5025960141a2f7aa64268e78513b8bae264e337741575ccef0f163c870f157841ad5cd5cb3a3db79c3d28e43cb5715b9ebbeddf2e4ac36ef3ec
SSDEEP

1536:CM6VTihfQxtQg1nhFc9pJpk+tCwmg+Q6buWkJ2/tnJs1vy61dzIANI:CJ0QxjJGJpTP65vF367MANI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8de98d62c9af00875e5b097b8249c965_JaffaCakes118

Files

8de98d62c9af00875e5b097b8249c965_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed77fb3a8b694a3bee854ede55f301b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
GetProcAddress
LoadLibraryA

user32

GetClassWord
SendMessageA
SetScrollPos

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE