69d5ff907f4a0e23c6954a49fa297f66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d5ff907f4a0e23c6954a49fa297f66_JaffaCakes118
Size

37KB
MD5

69d5ff907f4a0e23c6954a49fa297f66
SHA1

5aa65d8f5997404d44a3d5cf5c464b2918cdbfa4
SHA256

5ce4379bd4e3eac35999302a070557fa4ed9b218a709186298864c6bf1768af2
SHA512

ef77e939a430cbd6a3da01c621ad627d7301e95489ab05366c0da0ec892cfc6f00f51d3f5ca3d7c3909f0f395aca31e31e846caff1abbc29a2696ab213df0e63
SSDEEP

768:W1TMPO4Om0yym33uN8IpqcFcCz4zsp4iYOmnRAas0nr3JeZr:W1TxfZyfuN8IWy4zEYOidAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d5ff907f4a0e23c6954a49fa297f66_JaffaCakes118

Files

69d5ff907f4a0e23c6954a49fa297f66_JaffaCakes118
.exe windows:5 windows x86 arch:x86

99e1423072f6813a81cd5b4016fe2fda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
ExitProcess
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA

user32

PostQuitMessage
GetClassLongA
GetDesktopWindow
LoadCursorA
DefWindowProcA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ