dc786e2d21b7708da682c6a39c4a00ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc786e2d21b7708da682c6a39c4a00ce_JaffaCakes118
Size

36KB
MD5

dc786e2d21b7708da682c6a39c4a00ce
SHA1

ada7bfde14cf7b4154017e540e346bdcdbdf88f3
SHA256

115f881ea287eaf9426af922b0a2d40c251ce07a944ff57f5064ac2609cd62ba
SHA512

6a6509b86f11f6ab6626cc25ff3cc9d3c96eb48b2ed7c4f867ebcb81564995544139775413b8d4593be809cbcb2b82f941ca779d8374f8f0f5e4c3d3d0b01337
SSDEEP

768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578NkbH:h8wyJnYEOH9ZqDw8h3bzPD2meH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc786e2d21b7708da682c6a39c4a00ce_JaffaCakes118

Files

dc786e2d21b7708da682c6a39c4a00ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c539127eba3e0c62aaacfdb270652c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

MoveWindow
SendMessageA
SetTimer
GetClassWord
wsprintfA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ