d297f15e4c34aef13b4b18f09cfec904_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d297f15e4c34aef13b4b18f09cfec904_JaffaCakes118
Size

37KB
MD5

d297f15e4c34aef13b4b18f09cfec904
SHA1

f6789146a8c7d49edc03faa67440a6acfca0b5a6
SHA256

859a5bca1bdc29393a13b691c9fdda0d1320045f5e39ca02da8ab38d2d4931d5
SHA512

5fd8ad635a92aceed5500c11f5fc3f767c89c97bd62cc2c8cb97ba9ee984059b90099ec826129e1a3914b438eced20030830856e6a777c5d6caa8995ebd7bad0
SSDEEP

768:7a7Fz5nx+a+aGrILdPHjJh6j+NXZWLVlBO90bdJHl:GFzTF+aGrI51ZXZWH3dJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d297f15e4c34aef13b4b18f09cfec904_JaffaCakes118

Files

d297f15e4c34aef13b4b18f09cfec904_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47fc810afc7fd1f11ea7f7fbe17d2a40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

SetForegroundWindow
SetParent
IsIconic
TileWindows
ShowWindowAsync
GetLastActivePopup
GetParent
AnyPopup
GetTopWindow
GetWindowTextLengthA
WaitForInputIdle
CloseWindow
GetForegroundWindow
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE