fe77513797819c53d762a6186786e6ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe77513797819c53d762a6186786e6ce_JaffaCakes118
Size

34KB
MD5

fe77513797819c53d762a6186786e6ce
SHA1

eb5652550ce09596d85a4abcec02e4eb4ea44780
SHA256

dfe0afc29e4a64b6b893781f2bd08bd33f8b558db2cfbaea823e4bf09a2e071c
SHA512

55bb42b36ce958c89c8dd7bb4e78c97bbe3c72e90c3cfab515379da2ec31a9ad000c2be7adf2f149330435cf51fcc798d2f7a1d88196072e7ad301e402713849
SSDEEP

768:deE7wTjo/2FgpVPrZnxvz71MZEbM2xmJt8prhCOgur4BF2zi:deEMo9xvzhMu4Jt8proOumm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe77513797819c53d762a6186786e6ce_JaffaCakes118

Files

fe77513797819c53d762a6186786e6ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

697e8622707d3d53f17b01b0e39d0f59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetFileSize
FindResourceA
FreeResource
MapViewOfFile
UnmapViewOfFile
LoadResource
Process32First
SleepEx
GetCommandLineA
SizeofResource
lstrcatA
lstrcmpiA
QueueUserAPC
Process32Next
WritePrivateProfileStringA
GetModuleHandleA
IsDebuggerPresent
CreateToolhelp32Snapshot
CloseHandle
GetCurrentProcessId
CreateThread
lstrcpyA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ