46292549a3710c625897aef643235b01_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46292549a3710c625897aef643235b01_JaffaCakes118
Size

37KB
MD5

46292549a3710c625897aef643235b01
SHA1

4301fe0a41e8bdaba7411bff5479cd10bf7b7892
SHA256

73b37de404e99015f5cdd7db5d9d373dbe153b3c362be31bdd62a13fb0503557
SHA512

52d3b7ab07fcacb0d8618edb8c21208ff59946e69afea7100815b0f52f8759cab8a84a8c69538b56b9f6359ce7e716c05abc69fc8f027ce3fa9efb8fac22ffa5
SSDEEP

768:7a7Fz5nx+a+aGrILdPHjJh6j+NXZWLVlBO90bdJHL:GFzTF+aGrI51ZXZWH3dJr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46292549a3710c625897aef643235b01_JaffaCakes118

Files

46292549a3710c625897aef643235b01_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47fc810afc7fd1f11ea7f7fbe17d2a40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

SetForegroundWindow
SetParent
IsIconic
TileWindows
ShowWindowAsync
GetLastActivePopup
GetParent
AnyPopup
GetTopWindow
GetWindowTextLengthA
WaitForInputIdle
CloseWindow
GetForegroundWindow
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE