bcdb50e9e800197ef7075114de2d5e7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcdb50e9e800197ef7075114de2d5e7c_JaffaCakes118
Size

37KB
MD5

bcdb50e9e800197ef7075114de2d5e7c
SHA1

a3d96f64689643e7bfa7c773c162fdbb753ead43
SHA256

65727dc8da4fc7be394ab3ec8a98e169241168fdc200ad487876126d46c3be4f
SHA512

adafa19cbafea9dfe18be8d95de5440f3e4fe03907f391101c0a70aa7a4577218556e5e03dd7c87d02487f69f14ac2d4d28fefb59480f8a46eb56c11e03a5306
SSDEEP

768:XgQkYItDn0dXfeGXHizJq4sZN18pXvnemTrIavNrLg87sBJC:w/RVnSX2GCJqtDeeOIah98C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bcdb50e9e800197ef7075114de2d5e7c_JaffaCakes118

Files

bcdb50e9e800197ef7075114de2d5e7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95509c7785bea1420c6c0be56b5f50d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc

user32

GetWindowTextLengthA
GetParent
SetParent
GetTopWindow
GetLastActivePopup
ShowWindowAsync
AnyPopup
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE