334b8aba53404c1d671ebc2ea01468f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

334b8aba53404c1d671ebc2ea01468f0_JaffaCakes118
Size

299KB
MD5

334b8aba53404c1d671ebc2ea01468f0
SHA1

023b0a48a361e616c82ebefd6f9681f089be4141
SHA256

60349ac483d3a2ecb12a4ce0d4307eb74df620a81d6fad09a9241699da59cef4
SHA512

d37346ce042b633f8b82fb1becf1aaf2ec7e21df5893bec307ea22df0183ccec2269e1d73f10bcebe707f26982a10d2179fa1473032c526c94d5da9eab690032
SSDEEP

6144:r4VagNqOYHJ67cKsmVWickgt+bk8h3LQwX3ppKFw9O84LRmwZYQe/3RlFAaYj5m:sE8qbASmVlckOq5LNqFyO84EJQe/3RPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
334b8aba53404c1d671ebc2ea01468f0_JaffaCakes118

Files

334b8aba53404c1d671ebc2ea01468f0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d147a69e540485205d2936153d9656a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

qtopengl4

??1QGLWidget@@UAE@XZ

qtgui4

??1QPen@@QAE@XZ

qtnetwork4

??0QNetworkProxy@@QAE@XZ

qtcore4

??0QUrl@@QAE@XZ

libdjvulibre

miniexp_nth

libtiff

_TIFFfree

msvcr100

exit

Sections

.MPRESS1
Size: 279KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE