ab7c42c78e5477b8b4790d4119a749b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab7c42c78e5477b8b4790d4119a749b7_JaffaCakes118
Size

37KB
MD5

ab7c42c78e5477b8b4790d4119a749b7
SHA1

74afd0368c9747a779e324a72bebde42d1023c2d
SHA256

9bd644de8fbabf782f65aaf53d4e068f584d06024154944cf877496497603f82
SHA512

795d3036474d9fae24f6e5a7ea7e61bab47c76b0bca162722242d603666f85f6716a63141b899ef5cf2001b64623d3cc02b4285b868e34506a242bba6d537277
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnru:j0Rbb5WRQYt9ir/2wra1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab7c42c78e5477b8b4790d4119a749b7_JaffaCakes118

Files

ab7c42c78e5477b8b4790d4119a749b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE