0787524298922fb698748d3d0f9b7e76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0787524298922fb698748d3d0f9b7e76_JaffaCakes118
Size

259KB
MD5

0787524298922fb698748d3d0f9b7e76
SHA1

2a104ad7fa67a26df67c6f880db400edaff18268
SHA256

acbd21accd28259c1065a2fc60b62f3e42bec8c12aa3b2734f26cda715cda5f0
SHA512

f424352d4ac0b1d778827d11fe2b754ba64f37e0713cbfc8c6c71c19fecb42af6b606e496780addddbee79650dd725bc5ccebcaf2c6118bc583e884a9119f9bf
SSDEEP

3072:YG1Z+arFsy6pOAulJRzT4zu7hcoBUmktobHNfx:YqRuy6pcT4S76+UzSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0787524298922fb698748d3d0f9b7e76_JaffaCakes118

Files

0787524298922fb698748d3d0f9b7e76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

449cf7ab92f5777f689e4cb0ae3adb5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
LoadLibraryA
GetDllDirectoryW
SetConsoleCP
GetProcAddress

user32

CountClipboardFormats
IsDialogMessage
IsWindowUnicode
TranslateAccelerator
ShowWindowAsync

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE