d29e54d55c2633037475f998f45ce3b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d29e54d55c2633037475f998f45ce3b3_JaffaCakes118
Size

33KB
MD5

d29e54d55c2633037475f998f45ce3b3
SHA1

56348cdc0037ced7ed0b30502ba2794d8163044b
SHA256

45aa2449703345f8dc499cf8b07373f37c9f986e0ffd762028fbcaa75903269b
SHA512

1205abc4a3587f38a6e99197044cbbd9753f19bf6a33c513ed5d414ac2d70be36652876d6e6d5c1630fc6db5d5045d45e54e367df043c4d129d73559a2043f3b
SSDEEP

768:jWWneUZBwp7GJSQbduxxIygDnuKmqhZNwfdka9tpAg:jVLw1GJPIxIyenuKWfdka9tmg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d29e54d55c2633037475f998f45ce3b3_JaffaCakes118

Files

d29e54d55c2633037475f998f45ce3b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bf247c5211a45430f9166d15eeb7423

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject

user32

SetFocus
GetWindowLongA
GetForegroundWindow
InvalidateRect
wsprintfA
GetClassLongA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ