a28bc2b6e83612894588f44e78262d67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a28bc2b6e83612894588f44e78262d67_JaffaCakes118
Size

38KB
MD5

a28bc2b6e83612894588f44e78262d67
SHA1

227e99b034006d801121b4bb312119699cfe6b1e
SHA256

40551be5fa9a1c777697495870f7560d89c76dbbc880fa16f994d009437a9715
SHA512

fcb9d775fb143fd54a99c8e7776379b8b57e3df0b2759d1ccdc92a3d051af8777ef1e10911e9350996dd60ec6a0c35707634b42b6a39d9d8b24165eaf3c2e95b
SSDEEP

768:cD8Mku/08vChRzSbJ/iB1ljyRFQPeB1Qi6YyJVQQeDlV8T3+cxcGJ:ABkuM1hR2g18CeB1QMyJVQQeD4vxcGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a28bc2b6e83612894588f44e78262d67_JaffaCakes118

Files

a28bc2b6e83612894588f44e78262d67_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a49163137f7da412d513f7b8ae5fcb56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
WaitForSingleObjectEx
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

GetParent
GetLastActivePopup
GetTopWindow
GetWindowTextLengthA
AnyPopup
IsIconic
WaitForInputIdle
CloseWindow
IsWindowUnicode
GetForegroundWindow
TileWindows
ShowWindowAsync
SetForegroundWindow
SetParent
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE