15cf69bd17b4d3ee6e91e3eed4de162c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15cf69bd17b4d3ee6e91e3eed4de162c_JaffaCakes118
Size

41KB
MD5

15cf69bd17b4d3ee6e91e3eed4de162c
SHA1

ce742a1d75519c1d0a78e909f48609c20ef2a8f8
SHA256

4c0b9adf7c5f1af8847109a697603f7e4a36a398c74949c636e807276274fbdd
SHA512

160572be6e636b79aaa9e9254638f979d72e55428e3cb1f5af272d1d08e17eba9cd220cdf527d27159adabc35ae0c8194070f5c0b727b0821fafc8a14c7135d3
SSDEEP

768:JbTqavYjTvEBTfVDAyNX8PFOJ40feIaFzSUqSH3Ux2:JbTqBjT8fhAyF8NKeIaJEx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15cf69bd17b4d3ee6e91e3eed4de162c_JaffaCakes118

Files

15cf69bd17b4d3ee6e91e3eed4de162c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

054e4e5c28d6533b44ae24cbf3e08a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA

user32

SetWindowPos
AttachThreadInput
SetForegroundWindow

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ