a01065dffd6d8cb31d14c6132e724593_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a01065dffd6d8cb31d14c6132e724593_JaffaCakes118
Size

39KB
MD5

a01065dffd6d8cb31d14c6132e724593
SHA1

69fa5e075ead8b205e23f392fbea699fc56bbe49
SHA256

ce97418443a1c30929347faa07a7f841f3eace97222e4e778b82b3af6ced6cc4
SHA512

c5d1a2edf4b8c81c3ff133d8580f5bc5df7f153b924d9a7c8915ae0e5b36cf58df6ad2b4f990113e9833264f2cf1a25f4d8a3c7e3fa78a289295a40c523bf5e7
SSDEEP

768:F91dZKJxVZ897jK2JlET8OaHnPQ2AZUOtH602DALdAEllz6x6nh:3RIxU97ZYaogOB2DAyE+x6nh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a01065dffd6d8cb31d14c6132e724593_JaffaCakes118

Files

a01065dffd6d8cb31d14c6132e724593_JaffaCakes118
.exe windows:4 windows x86 arch:x86

018b3a54ba0c247067429f31ec6b15ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

GetWindowTextLengthA
CloseWindow
SetParent
SetForegroundWindow
WaitForInputIdle
AnyPopup
GetTopWindow
ShowWindowAsync
IsWindowUnicode
GetParent
TileWindows
GetLastActivePopup
IsIconic
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE