268af1a7ab5aa608b5a6e1db7ab0550a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

268af1a7ab5aa608b5a6e1db7ab0550a_JaffaCakes118
Size

20KB
MD5

268af1a7ab5aa608b5a6e1db7ab0550a
SHA1

a68b587d2d88eaa15324bb1f1b83f5de765e1aad
SHA256

90be5f91a8082b8c7448226c54f21d0419e11226be6be2a91509b0c2fd3b67b4
SHA512

14eed2d3a5959d0ba83ae85bcf9479196a77489b8cff343572d57094ab90770ea82d4b7b4c64ef47d2f0483ffbdd82fe46e8e5781d1c443061f5b7b42097ed8a
SSDEEP

384:T/2pudrnt3xKEgjlzYf/dczq0KAE7yo+oOC+k:T/2puFKEgZzgd7AEeo7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268af1a7ab5aa608b5a6e1db7ab0550a_JaffaCakes118

Files

268af1a7ab5aa608b5a6e1db7ab0550a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f7b6e4b2e1f8d892573e083ca61da15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtectEx
ExitProcess

user32

CloseWindow
GetWindowTextLengthA

Exports

Exports

Shdexyjtt
OpenSfwxqbun
Mshimve
Aqvibbswefg

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sec3
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ