f06bb0a723dde6de11097276f162e26c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f06bb0a723dde6de11097276f162e26c_JaffaCakes118
Size

41KB
MD5

f06bb0a723dde6de11097276f162e26c
SHA1

ddf25e6e78bf166ef1c278b5db4d066770c4b626
SHA256

827e909e4a485620a062ef23008c2d0bfa82fa5af813e193652a51d48b62139e
SHA512

c667d01c6a40a93ac1f0d8f59a7016f26b4a9fa0dd9defacdadcb3dd1177276874ad15a1ea7df9420273fa26662a1b940c37164231120bbdbee994125496cf23
SSDEEP

768:Bi6MbK0BYoGfqCZlySRO2woK/Z6YIhoFtQjXyEJvc8JzKZr12qhZhXk:cJWoYnqCjao/HzxCQzKZrYq5Xk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f06bb0a723dde6de11097276f162e26c_JaffaCakes118

Files

f06bb0a723dde6de11097276f162e26c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6613054c1c58e485e0d777aae4d4167b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA

user32

SendMessageA
SetWindowPos
GetForegroundWindow
SetForegroundWindow
SetActiveWindow

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ