02772bbac89b53700eea3ed63a6f934f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02772bbac89b53700eea3ed63a6f934f_JaffaCakes118
Size

84KB
MD5

02772bbac89b53700eea3ed63a6f934f
SHA1

900dcd983f717339c0e8f42dd2eb1cfc85207ae6
SHA256

adb6869636178b405b237630d486c13a9ff1d9f1e3fdbede63743fe496c10fe1
SHA512

255c55f67dd0a7acec9ffc7ebda7815689e0d22c2acdec44a169ea85d64848003df0ea0856cbdae5ac6a14850c083edafad891c6139d6c77e487b09c290ae55b
SSDEEP

1536:zo6gaU+cXB6i2WSe0WfdmJuQxyRwu1pQ55c8UCOJt:7DUiV/LWfdmJ9xyPaSt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02772bbac89b53700eea3ed63a6f934f_JaffaCakes118

Files

02772bbac89b53700eea3ed63a6f934f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a372d17bbe5ea6a278a4f669f4d20ba8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
CloseHandle
CreateWaitableTimerA
DeleteFiber
DeleteFileA
DuplicateHandle

user32

CopyIcon
CreateIconFromResource
CloseWindow
BringWindowToTop

gdi32

CopyMetaFileA
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
DeleteColorSpace
CancelDC

Sections

.text
Size: 62KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE