b120d64cfa746c022f7d398a11e3d427_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b120d64cfa746c022f7d398a11e3d427_JaffaCakes118
Size

13KB
MD5

b120d64cfa746c022f7d398a11e3d427
SHA1

f8996ac526f62a35006b52227450a3efd8c3538d
SHA256

457dfbec355cdeebbddef65dc94c0effbacdb9cd37f2d7c8c33106eac331808d
SHA512

2e280cdf0b0452c1f3e67b14c56bcb1355c3af5b0195c2341f3e13a9b7861ee03b9dfae8e7084dbfbe9692fc3e0dab2903bcbe069a2ab69b76a29560f61f2aaf
SSDEEP

384:rZei0XN2I46XvP0POd8dhMrnPliQerNc:8iaX0POVT9reJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b120d64cfa746c022f7d398a11e3d427_JaffaCakes118

Files

b120d64cfa746c022f7d398a11e3d427_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d9fb725f0c743f025dfdfbec776d854

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetForegroundWindow
wvsprintfA

Sections

.text
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ