4161028dc7633e620f0d52ac3346b4f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4161028dc7633e620f0d52ac3346b4f4_JaffaCakes118
Size

38KB
MD5

4161028dc7633e620f0d52ac3346b4f4
SHA1

8dd749e6d46c8445b0cfba12109a844a2a4f520b
SHA256

a9759b776b280b5208b439f5d11294318b92f27dc4f518326a044c433ad5eab1
SHA512

96183f977e84bf66ca5fd4e65ddf5538b841706091f99d7c0913dfbb818a21f52ff2f7c1e1bda150754ae66ae5cd4dd01bea81e431e542b456b5e2a3e86bf639
SSDEEP

768:5gRh+fUjcKzjv1GK+94VSzmVSaVxddYZ6c4QAsD6XGWqBA:5JfUjc+vA94AeptdGbDD6XxqBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4161028dc7633e620f0d52ac3346b4f4_JaffaCakes118

Files

4161028dc7633e620f0d52ac3346b4f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22f9469c59db1d4369ab5112f6116e7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetTopWindow
ShowWindowAsync
CloseWindow
GetWindowTextLengthA
GetParent
IsWindowUnicode
WaitForInputIdle
GetLastActivePopup
SetParent
AnyPopup
SetForegroundWindow
TileWindows
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE