e79507d45779faa47083ce1825139fcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e79507d45779faa47083ce1825139fcf_JaffaCakes118
Size

106KB
MD5

e79507d45779faa47083ce1825139fcf
SHA1

65802f9a2675522c9de58fc7150d524f6b3008c3
SHA256

c2122dd77d0381a3848c23413acb534af57ab6d5956935a00986c758a35b703b
SHA512

e9d5681c3de7bf7c61015c68bb9926ed15b2434e20981e063a182db6a3c29edd27ef4f92032cc115ec11463baf2d840fa6e6b22d5c55360e5d6a6a3cb5dc46d6
SSDEEP

1536:m3orVP1DVwXxKugu6jc4FW5KrenLIMDS06yH7YvuBNt//mP5oMq1XkR8fTbq:moPcxKuf94Fd0z9H7YvSNVmUUR8fq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e79507d45779faa47083ce1825139fcf_JaffaCakes118

Files

e79507d45779faa47083ce1825139fcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c60d6cfc4d03593c7885082fe86d8591

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteFileW
Sleep

user32

CopyImage
CopyIcon
EndDialog

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 441B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 72B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ