5470bbdbda9b480cd5f05275e7b60bf0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5470bbdbda9b480cd5f05275e7b60bf0_JaffaCakes118
Size

94KB
MD5

5470bbdbda9b480cd5f05275e7b60bf0
SHA1

a3cc15795901c96122d4f160d4a3b6ffae7e9def
SHA256

f8fe0f863017c50052380a99dc9610c79545c135055a589c8fa207ce8f40ae77
SHA512

6cca3940b296229bd70d64226b58520e34451355ba257335d60207593fa5a73254e83491e5890244597dc87a2bd45636d8e86908397b3977ab8b306b6e3c7bca
SSDEEP

1536:DdJrJihfQxtQg1nhFc9pJpk+tCwmg+Q6buWkJ2/tnJs1vHMpUv/r/:J54QxjJGJpTP65vFYMper/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5470bbdbda9b480cd5f05275e7b60bf0_JaffaCakes118

Files

5470bbdbda9b480cd5f05275e7b60bf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

481560e37c8a58c9605353c8ddcd4a8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
GetProcAddress
LoadLibraryA

user32

GetClassWord
SetScrollPos
SendMessageA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE