75db4b7b4e9ded30ce243ac13bab042b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75db4b7b4e9ded30ce243ac13bab042b_JaffaCakes118
Size

115KB
MD5

75db4b7b4e9ded30ce243ac13bab042b
SHA1

33e88594b0e1863a91e7d0e3ec3d0f5afe661e42
SHA256

185fe5f5ce441dbb197d00c3835b0dda00cf5633639a406d984c9fca820ad439
SHA512

b73df840422481a45b49bb740949f0176ce0a8321645fa73ed03bfac099b4398a9ca0a56682576f599d49045649c8e5538bf10822374d654ebce7cf559892e32
SSDEEP

1536:tHp0jI7tGKH53W5U8/iGkjyPRt1tN4YqvDrsnQJ9d7jwyqMqQSa26Nm8miq:tGjSZ3epPRtvPqv8nQJrwc/dNFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75db4b7b4e9ded30ce243ac13bab042b_JaffaCakes118

Files

75db4b7b4e9ded30ce243ac13bab042b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3f0209824fe4b023c58526361e644500

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetCommandLineA
Sleep
ExitProcess

user32

GetMessagePos

Sections

.text
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Inqljbtm
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bxfyd Ly
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Kravovfa
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 235B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ