cdf37bdbb1fd8e9ff085285960649e50_JaffaCakes118 | Triage

Sharing

General

Target

cdf37bdbb1fd8e9ff085285960649e50_JaffaCakes118
Size

43KB
MD5

cdf37bdbb1fd8e9ff085285960649e50
SHA1

a82c5a889e3dd5d1bc19f453ed6bf143cf9c8bb7
SHA256

145a9f820f2b9fbb5589ce32b0a3e69fe50c1de791f633323950b6225293c9a7
SHA512

5c414d9e7092f2ab2520d29442f8d9bc5a37d96ac1a403447b709a59bc6e68fe15163535a433a441dd07268d9b0789170d92eaf966e093336ddbb46513acca4c
SSDEEP

768:sbTqavYjTvEBTfVDAyNX8PFOJ40feIaFzSUqSH3Uxd:sbTqBjT8fhAyF8NKeIaJExd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdf37bdbb1fd8e9ff085285960649e50_JaffaCakes118

Files

cdf37bdbb1fd8e9ff085285960649e50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

054e4e5c28d6533b44ae24cbf3e08a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA

user32

SetWindowPos
AttachThreadInput
SetForegroundWindow

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ