e1c6d7db984b460b59b564333e0596ae_JaffaCakes118 | Triage

Sharing

General

Target

e1c6d7db984b460b59b564333e0596ae_JaffaCakes118
Size

35KB
MD5

e1c6d7db984b460b59b564333e0596ae
SHA1

cd98702154928659db7aced67c97da8338b7a851
SHA256

1568b4ff4ef1fa7e04b845a9931106c7715d2da7f6e92018bf10189137c0f833
SHA512

755e9d548761af3ae19299d0c0ee1f7b0e178d0db905585c589c10b6375c30ac31ffebf30ea551d6fcda18c41537503fac64759fb0b051e8f1c5d7447e53099e
SSDEEP

768:7lIGpJ3bZy1SAP6Cb2ye/w4UbDN3jKgUjIjQ0+GtmZuAZonJMl2:5xJLY1SAyQ2yGwRzhIGtvJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1c6d7db984b460b59b564333e0596ae_JaffaCakes118

Files

e1c6d7db984b460b59b564333e0596ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ec251c946ee25dec80fd304c1fc008a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

user32

GetWindowLongA
GetForegroundWindow
GetClassLongA
wsprintfA

gdi32

GdiFlush

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ