07267ee48a2dbb0d37c15a1ec6011a4a_JaffaCakes118 | Triage

Sharing

General

Target

07267ee48a2dbb0d37c15a1ec6011a4a_JaffaCakes118
Size

26KB
MD5

07267ee48a2dbb0d37c15a1ec6011a4a
SHA1

48425329d30b2c100521340a615a46382af1444c
SHA256

42cc0a70de000e496c75bdad60dabf7a615d7de707d1068ce8ffa2b717ed230d
SHA512

56a805e7257655f6d698e1d5c102e5d22259c911cdce9158fb350810258f2c13b57d700e4a434379613c16fe7f189b88f361ef86040f8782d78f8439d53db518
SSDEEP

384:U2GeO2hWFDj08ILTTkcn/9pS91FL2b12Nxpk8+cNTRe/LGZ3i10a0N:U21t8hj08Tcn/UF6kNYhSReLGZ320a0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07267ee48a2dbb0d37c15a1ec6011a4a_JaffaCakes118

Files

07267ee48a2dbb0d37c15a1ec6011a4a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a3458f63db0e4ed6875e54283c5bd89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
FindResourceA
FreeResource
MapViewOfFile
UnmapViewOfFile
LoadResource
Process32First
SizeofResource
lstrcatA
lstrcmpiA
Process32Next
WritePrivateProfileStringA
CreateToolhelp32Snapshot
lstrcpyA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind

Sections

.bss
Size: - Virtual size: 820B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ