94da33d33d89b31a625df59da1de5722_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94da33d33d89b31a625df59da1de5722_JaffaCakes118
Size

38KB
MD5

94da33d33d89b31a625df59da1de5722
SHA1

9c53f9e07293fa65b6bdbc87a042b93587f20969
SHA256

4278b9b32d43549ca21c8b231f61ae098f8702c3959e6fce8df0ff46de909587
SHA512

ef7895022c356638bd91a64e2483b1bd0efa3009f9a07cea8ea6b525bd62b5c1bf567291dc326b28ff9bc6aea4a8c16dc6c9420ca2976af14a6b11375a8d3685
SSDEEP

768:cD8Mku/08vChRzSbJ/iB1ljyRFQPeB1Qi6YyJVQQeDlV8T3+cxcGB:ABkuM1hR2g18CeB1QMyJVQQeD4vxcGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94da33d33d89b31a625df59da1de5722_JaffaCakes118

Files

94da33d33d89b31a625df59da1de5722_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a49163137f7da412d513f7b8ae5fcb56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

GetParent
GetLastActivePopup
GetTopWindow
GetWindowTextLengthA
AnyPopup
IsIconic
WaitForInputIdle
CloseWindow
IsWindowUnicode
GetForegroundWindow
TileWindows
ShowWindowAsync
SetForegroundWindow
SetParent
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE