3851c090fd15ecf1267592766417a0a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3851c090fd15ecf1267592766417a0a0_JaffaCakes118
Size

35KB
MD5

3851c090fd15ecf1267592766417a0a0
SHA1

2fdaaa5395e347c1d38878c141631b75378ab67d
SHA256

672df0d6923141f54f21b0f172e88f9c5786dbbdeb95e01db35865aea1c76f5c
SHA512

0061dbba4fd32ad8bee3182b6e760b5acfcf47624ee400ce651343c4cd96a212ed2c7f2e3baa8c8f6e3d31e5b35b4f548d2addf0f88bfb2f6c577eb1a3012f44
SSDEEP

384:x9RlQG13BLgexxxaR0O834rfmAT/5bcicoAVmaqsj7T0oY7cQ67oJk1Ziwf6hycR:TQGpmes+olciha/sw8cF6srxLwN97jj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3851c090fd15ecf1267592766417a0a0_JaffaCakes118

Files

3851c090fd15ecf1267592766417a0a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8c5aee3de0affe7b6feb7a975919652

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WaitForSingleObject

user32

GetWindowLongA
GetScrollInfo
GetClassLongA
SetScrollInfo
KillTimer
InvalidateRect
wsprintfA
GetForegroundWindow

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ