efd17104926f89cc02998b6102760cb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efd17104926f89cc02998b6102760cb7_JaffaCakes118
Size

36KB
MD5

efd17104926f89cc02998b6102760cb7
SHA1

d82e230c7fa4cde9cae2ec004e9b179b829009c1
SHA256

cb5aa578919bcaac7994b3ebe5fa3ba1c7d6e21cc6b56b7a8c93b7bd61b5c5bb
SHA512

8c5c18c91b9cf3f6da38b191bd10fb1bdf85a51d04ccafcdc987a405edb32b863334b60f3572065953ebbc9f5874e31689d503d21b925bfbc0d5ef187743ba84
SSDEEP

768:DlcTwpQJkYYTgOnHBqQTZqDsQw6AL7oh2q7vm6PrP2578NkbS:h8wyJnYEOH9ZqDw8h3bzPD2meS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efd17104926f89cc02998b6102760cb7_JaffaCakes118

Files

efd17104926f89cc02998b6102760cb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c539127eba3e0c62aaacfdb270652c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

MoveWindow
SendMessageA
SetTimer
GetClassWord
wsprintfA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ