a1674d61f9e576827c331c17145b79ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1674d61f9e576827c331c17145b79ae_JaffaCakes118
Size

37KB
MD5

a1674d61f9e576827c331c17145b79ae
SHA1

a56f345bcd7c585f0691819fe2872728511ef30f
SHA256

611ff636d305f381467bbf90d9b34f7756633611d24538591fbd59531bc7cd1a
SHA512

f149b4189b56f5c575a52b2aa9cb7d34a827d33156e684b43db60d12a6e6c52c5402f2d2c8c96e94169c3a8302815527e1467d0d06ee56fe322de4af024fb2f9
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrS:j0Rbb5WRQYt9ir/2wra1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1674d61f9e576827c331c17145b79ae_JaffaCakes118

Files

a1674d61f9e576827c331c17145b79ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE