d23f7f612e321152674d07c1c955ba38_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d23f7f612e321152674d07c1c955ba38_JaffaCakes118
Size

1.8MB
MD5

d23f7f612e321152674d07c1c955ba38
SHA1

6a60ac63f310636a17ded80b02bad1a0e0cf7ac8
SHA256

0419b3932dba57ecf2184de7e13bd088234ee1c6c938c0fcd70f470ed2d87974
SHA512

c870e999fe09945eea9f58a5303ba29049183690256af50de54e0096902af2b0a80ca97278c8619acad738d16a6a512911e1825e92d1c897a359138f64785867
SSDEEP

24576:oow3vFK3Umw4QYTK1f2jrKIzxNxwT/mYboZEnstLi7dgHmFoWObjl6P3OKYpgn3X:Z603UP4/XKqxPYbQYcB1geKognu/hmeq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d23f7f612e321152674d07c1c955ba38_JaffaCakes118

Files

d23f7f612e321152674d07c1c955ba38_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e73825ec395ddb1e16e1370cd67e9a51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32 msvfw32

CallWindowProcA n�%

Sections

.text
Size: 416KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ