cec10f2bb053696b46a349c006c5d977_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cec10f2bb053696b46a349c006c5d977_JaffaCakes118
Size

34KB
MD5

cec10f2bb053696b46a349c006c5d977
SHA1

395a68376d02e5774b1c2fa43f068211405e9d52
SHA256

f3d0ae6d5e47932e27f026570b56fdb52b302736be9614df6cd7bbc15f4fd8c8
SHA512

eb77f02dcc24ceeb07de5f325dc5f872a91b72772c1656e52458288cc44778bdc9e5ba2070197f7b7f2cfebff6fe37ac7eaf8e9f15619d434045f326d935e29a
SSDEEP

768:7C/ZZIq55P8S1QZRPas6yjlbY8pxejmc1JsbR0y0DT8:7ChWqrnQZBzphY5j91ybsDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cec10f2bb053696b46a349c006c5d977_JaffaCakes118

Files

cec10f2bb053696b46a349c006c5d977_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7de49cbc97a19a8399abeee12cd82ea7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
WaitForSingleObject
GetProcAddress
LoadLibraryA

user32

wsprintfA
SendMessageA
GetActiveWindow

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ