a8b03285e10aae0966a3cf3dfcc5f0ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8b03285e10aae0966a3cf3dfcc5f0ab_JaffaCakes118
Size

37KB
MD5

a8b03285e10aae0966a3cf3dfcc5f0ab
SHA1

cec834351a2b6cbf5d50c379c040c8968126a52c
SHA256

385d24d122ed146105cc5fae9707d3b5f47fb4eaa7649ab4ccc2db2fafbfe222
SHA512

c5c992a63803be94c194d2a70e560757a51816dc4a9ea860e2844ead370198fa17cbe5af545eada502dc0c9abcd2bdc97f8fd6eff374c28da6c13ffa3e92689c
SSDEEP

768:7a7Fz5nx+a+aGrILdPHjJh6j+NXZWLVlBO90bdJHY:GFzTF+aGrI51ZXZWH3dJ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8b03285e10aae0966a3cf3dfcc5f0ab_JaffaCakes118

Files

a8b03285e10aae0966a3cf3dfcc5f0ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47fc810afc7fd1f11ea7f7fbe17d2a40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

SetForegroundWindow
SetParent
IsIconic
TileWindows
ShowWindowAsync
GetLastActivePopup
GetParent
AnyPopup
GetTopWindow
GetWindowTextLengthA
WaitForInputIdle
CloseWindow
GetForegroundWindow
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE