adb5ccd49e22e9901d6dd14505157951_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb5ccd49e22e9901d6dd14505157951_JaffaCakes118
Size

13KB
MD5

adb5ccd49e22e9901d6dd14505157951
SHA1

024324febb18cff6c12cdc5ea41c6ec664108144
SHA256

79284848f3f769ff9d6a39fe06ec39a4c408fbea8eb1a99df0d354bfe37c9bbc
SHA512

84c02437e28327182a549f98b3e1a11308cd26cc73738195bed64adba49790336534881affc242b7eb0a026dab328c51eb411363fe6980ea5514b484e9b81188
SSDEEP

192:rULZAdK7GUXN2I46XxceuVE0qiOd8dhMrEVTA1PlClrcerAvaslPg:rGnXN2I46XvP0POd8dhMrnPliQerNc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adb5ccd49e22e9901d6dd14505157951_JaffaCakes118

Files

adb5ccd49e22e9901d6dd14505157951_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3d9fb725f0c743f025dfdfbec776d854

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetForegroundWindow
wvsprintfA

Sections

.text
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ