14b323e29aa76d74382a86490511fcce_JaffaCakes118 | Triage

Sharing

General

Target

14b323e29aa76d74382a86490511fcce_JaffaCakes118
Size

134KB
MD5

14b323e29aa76d74382a86490511fcce
SHA1

3019678a68aa7cee859225ef14699277844483e1
SHA256

41ada58113ef2f1af428e5acfd357d3cb58dac45235b5717bf6c455b22c7740a
SHA512

66f7a4a8d2a7b38d163a1d5dbaf8a1cf89572f13ea413da514ad2c33372cb3a7ea35489bc25d3ff23e74b1ad01484921f1242651e3c71aa994e2798fb79d8573
SSDEEP

384:whDvQMUJBnQmMn1WNPFEMioBj5794rxMFrpQ/xPq6vlbtoIRGfkJ/SOyGzPARd:whDoMX1WNqnY9mMFrKxiKafjO3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b323e29aa76d74382a86490511fcce_JaffaCakes118

Files

14b323e29aa76d74382a86490511fcce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b249085bd1087ff50ea5798160045f6c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PeekMessageA
SendNotifyMessageA

Exports

Exports

Cegicrpurea
Strjrwj

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 3KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 99KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ