1c78094e9562d1a8db63284be777ba67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c78094e9562d1a8db63284be777ba67_JaffaCakes118
Size

81KB
MD5

1c78094e9562d1a8db63284be777ba67
SHA1

7434dac789d36cc65ba7d8035669743749559711
SHA256

da6fd057f7ccef2a2c75bf713411338201fad6d513994647a05033cfe6d7a1a7
SHA512

813571eb1a068d4bf281b5b1ff9c1f0ec7506bb3bf435f07c9d3d1a398affaea02e5d44b470d43e2a2d2b817fa84ed5e8307c51f86d17d96da445144d144a6bb
SSDEEP

1536:1KGJNCWPlhz0RNTtIFPjd+NXlMPzBqPFQ9WROYyoVsz9uzF1GWV5dJOvNs:EGJzP0nTtq+hlaqP+qVsUFRdes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c78094e9562d1a8db63284be777ba67_JaffaCakes118

Files

1c78094e9562d1a8db63284be777ba67_JaffaCakes118
.exe windows:5 windows x86 arch:x86

93c6c73136d3be79741b2f03534dc28f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
SetPriorityClass
VirtualProtectEx
SetLastError
GetStartupInfoA
GetModuleFileNameA

user32

BeginPaint
GetUserObjectInformationA

Exports

Exports

AddLbpjgfifp
Puxjmjk

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rcode
Size: 544B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata1
Size: 67KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ