52c8ded7efcdda4dbf709017a4d2bf2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52c8ded7efcdda4dbf709017a4d2bf2b_JaffaCakes118
Size

36KB
MD5

52c8ded7efcdda4dbf709017a4d2bf2b
SHA1

279bfaa4a3a4348efd156fdcb9ceaaba676b83f8
SHA256

dc3e9937a9fb66a281e1d1cc96c738341447e7dad5a47a4c88b0c359ba940548
SHA512

7a7108c739922dd4ec7b6e9a0b2a2500a5e33bee4ed6409b3d0a5bdbb0f8280ff197ce780a155d6d74c270109d252714bde403cf21a4db600d5c5dd9bc31ca62
SSDEEP

768:RWHlJo+G18tIf3WdHRmcWEQu68iyiPu9FEovzJ0xHThoKlBt1cCftrvp:ROlXGi2f3WdHDou68iyiW4QzJmThdeCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52c8ded7efcdda4dbf709017a4d2bf2b_JaffaCakes118

Files

52c8ded7efcdda4dbf709017a4d2bf2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc663b4e36494c9e94b3cf3fda632fab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
ExitProcess
lstrcatA
GetProcAddress
GetModuleHandleA

user32

SendMessageA
ScrollWindow

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ