b8c6ce1c53d8a46d70f8d53ce5be4865_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c6ce1c53d8a46d70f8d53ce5be4865_JaffaCakes118
Size

41KB
MD5

b8c6ce1c53d8a46d70f8d53ce5be4865
SHA1

2604068be529883000b9be36a0a10438900acc81
SHA256

ce983e90056e543b39e641c3f3cbd979970152479c6633c9c476003f34c77700
SHA512

1d167918594ab61cfef0e733014dcd40b9db4628040721285271915f121fe055ffa2ef28ad4108f97e10d6a038ffab84b116ea02265c8a696a03eddaed62765b
SSDEEP

768:JbTqavYjTvEBTfVDAyNX8PFOJ40feIaFzSUqSH3Ux2l:JbTqBjT8fhAyF8NKeIaJExC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c6ce1c53d8a46d70f8d53ce5be4865_JaffaCakes118

Files

b8c6ce1c53d8a46d70f8d53ce5be4865_JaffaCakes118
.exe windows:4 windows x86 arch:x86

054e4e5c28d6533b44ae24cbf3e08a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA

user32

SetWindowPos
AttachThreadInput
SetForegroundWindow

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ