073a1badaaf5d6d3d493b7ba73af2ed8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

073a1badaaf5d6d3d493b7ba73af2ed8_JaffaCakes118
Size

190KB
MD5

073a1badaaf5d6d3d493b7ba73af2ed8
SHA1

30a1aea8a3421bcdedefeb8cbdfee2143f80a033
SHA256

612da66a384da37b5d534993eb82712ab31d26de8da5f409f2fc168106eca636
SHA512

9a7d82d6dcd70010cfc0fe6e402deafaf5844de5f7e8c40ba52c092adaa7675351d5fd1040ea7cbc8467aad5a0ec4253acb498fae5df2c753949a22b1113cd3a
SSDEEP

3072:KB6O0cut4wvdtrL4vZZufEYMMFeX0cgCo14Gk5wX5cgcZYHmL6r19nJ:M6O0cut4wltrsifEYMMUkcgCoBk5A5A2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
073a1badaaf5d6d3d493b7ba73af2ed8_JaffaCakes118

Files

073a1badaaf5d6d3d493b7ba73af2ed8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5298eb2d9ccc75187cc33c4b06a24f98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
SetUnhandledExceptionFilter
Sleep
GetStartupInfoA
GetModuleHandleA
GetCommandLineA

user32

ShowWindow
UpdateWindow
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ