f7c95c7731195d700c39e7fe5f472019_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7c95c7731195d700c39e7fe5f472019_JaffaCakes118
Size

486KB
MD5

f7c95c7731195d700c39e7fe5f472019
SHA1

42789004df8b3975926bac22cca938c99a783450
SHA256

90cd7601422b2cf4388a831bdd447ed374c2241dcf85f139368da8f3c6148e3f
SHA512

c892c9ca6b2fe04d90e1aaee0507772f5918411f86d71853d471e46c64742524eb7bb90cd0d7212833a14c461bba919e8455da483994be337cb9a312ed6b0672
SSDEEP

12288:fKUCHZ9K2wEefDOrBo3bY/QsLfshmXcbyEMT67o5D7/Ky5oRS2j:PGK2kfSKkQsTd4yrYoAyo7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7c95c7731195d700c39e7fe5f472019_JaffaCakes118

Files

f7c95c7731195d700c39e7fe5f472019_JaffaCakes118
.exe windows:6 windows x86 arch:x86

63ac7c2799723925dd310860701c20d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

GetUserNameA

comctl32

PropertySheet

Sections

.bss
Size: - Virtual size: 236KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 350KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE