a3f10b5a7d7f7529cdb3c57bfd4d351f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3f10b5a7d7f7529cdb3c57bfd4d351f_JaffaCakes118
Size

37KB
MD5

a3f10b5a7d7f7529cdb3c57bfd4d351f
SHA1

c735b4456cf19bf703685f859a57c553d177c12f
SHA256

2d20afc5266b6b37fd295261b810b0a0719a02037f2a672f63197badf2902d38
SHA512

774f9aad366bde61c8bfd7927e8bbed2fc00752d5d9769a4f36e083f2a70c39ec3055f058a070e62c1e1b76bdce348e41fdb93d84dc5367c657c98bd037357ea
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrf:j0Rbb5WRQYt9ir/2wra8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3f10b5a7d7f7529cdb3c57bfd4d351f_JaffaCakes118

Files

a3f10b5a7d7f7529cdb3c57bfd4d351f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE