b360b3f0f37a0026103b66496cc4c9cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b360b3f0f37a0026103b66496cc4c9cf_JaffaCakes118
Size

38KB
MD5

b360b3f0f37a0026103b66496cc4c9cf
SHA1

a1deeb84c9b36556230f45ad1a25d5d8a0b3268a
SHA256

eb8214adf764ec1b38882348027fbbb5d785e2921cfb98d5a7db51a3dd48b9af
SHA512

d7ee2411d2d82fd78013679736bd012dd8cea09e14c5a65083ad4b7bd3df6bd9e88190cdab047268ee558cdce489134ce2f967a55fc80d0722f81e290d54febe
SSDEEP

768:EoGBwgQ9xh7miRJsKue84EZ43eX/rUI/w9bbVAAtFPoIlan8X:EoGBwgc7miL85ZGWQIohZAAfm8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b360b3f0f37a0026103b66496cc4c9cf_JaffaCakes118

Files

b360b3f0f37a0026103b66496cc4c9cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9e1048df170a525bae12059b67d988f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetWindowTextLengthA
GetParent
GetWindowLongA
GetForegroundWindow
CloseWindow
GetClassLongA
GetClassWord
ShowWindowAsync
TileWindows
GetLastActivePopup
WaitForInputIdle
IsWindowUnicode
SetParent
AnyPopup
GetTopWindow
SetForegroundWindow
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE