f2e07601cb00d1b119f4192431ef2618_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2e07601cb00d1b119f4192431ef2618_JaffaCakes118
Size

93KB
MD5

f2e07601cb00d1b119f4192431ef2618
SHA1

037f96e12cbda85353c00f7bcd008f27dbe70fba
SHA256

bacaff3381ce0271ebb3d2e601306eb9bfa6f72092ae6f8a7838fe5624391943
SHA512

7bff8837f28911d7968282b4ecf911a8c4642b04c0f02c697927dc4b1d1ce185e470029610ac92b996e056bd3d38f7ae467f993f3facdbf2a4ee5fd13924acfa
SSDEEP

1536:9zfY4wqyvqfNyaRNPmD02tdGYNJ97F3MCGvXwNDl3IY1HK9bN8Wm6OR33H24S77+:97eqRfTnuA2vGYAhvqHq9eM77tM2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2e07601cb00d1b119f4192431ef2618_JaffaCakes118

Files

f2e07601cb00d1b119f4192431ef2618_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c53e87904f89847b22e171d1eaafd62b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
VirtualProtect
LoadLibraryA
GlobalLock
GetCommandLineW
GlobalUnlock
GetStartupInfoA

user32

PeekMessageA
SendNotifyMessageA

Exports

Exports

BeginSspxjgljip
Cwryscusb

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e4355
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE