7033c05725aba5a63b184c375eadad85_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7033c05725aba5a63b184c375eadad85_JaffaCakes118
Size

121KB
MD5

7033c05725aba5a63b184c375eadad85
SHA1

0382278159fa3668dd0ecc3b5135d2b554165b71
SHA256

1d031088ccc17a2f6ffdedab1be8b1fc49107a71cdda6ba360f6f51a650a351d
SHA512

66421396923db98ab37cbf7da1091c30a2a0909e1242b801a326d1db25c2cad92cf86157e4c5e98706e8ca4d6e2a847e94ba8ad7b1f6e87a2919630b1cc0a9fc
SSDEEP

3072:FpngghVbxdAcRX9NSO7/KOYpt43zdjqMEZWyM+CO8PFI:fnzDbxdpXiOzKZptazdDgVMN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7033c05725aba5a63b184c375eadad85_JaffaCakes118

Files

7033c05725aba5a63b184c375eadad85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e58f0165ddfa80c4798ed6e092e963cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetLastError
SetEndOfFile
SetFilePointer
GlobalDeleteAtom
ReadFile
FindClose
EnumResourceNamesA
ExitProcess
GetLocalTime
WriteFile
FindFirstFileA
CloseHandle

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ