fc82597bf3eee7106a86e5622e654de5_JaffaCakes118 | Triage

Sharing

General

Target

fc82597bf3eee7106a86e5622e654de5_JaffaCakes118
Size

34KB
MD5

fc82597bf3eee7106a86e5622e654de5
SHA1

2b913334f4f6099cfe6a7b5abcb24a551a556982
SHA256

154e56aa378ba8687060546ac16d691b434a920a4034d9f5236fc1d0477478a5
SHA512

bc0393a1847446486a40230a7d5c62859dd759a47631667b82a3717c2d37bd5458fb113ca7f7dc889f2ca74f85c65c2dcc7be986ad90c70a28c42252215397b1
SSDEEP

768:7lIGpJ3bZy1SAP6Cb2ye/w4UbDN3jKgUjIjQ0+GtmZuAZonJMz:5xJLY1SAyQ2yGwRzhIGtvJw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc82597bf3eee7106a86e5622e654de5_JaffaCakes118

Files

fc82597bf3eee7106a86e5622e654de5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ec251c946ee25dec80fd304c1fc008a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

user32

GetWindowLongA
GetForegroundWindow
GetClassLongA
wsprintfA

gdi32

GdiFlush

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ