76119ae1db950e98bcb3e2473673537f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76119ae1db950e98bcb3e2473673537f_JaffaCakes118
Size

33KB
MD5

76119ae1db950e98bcb3e2473673537f
SHA1

88f5ce5796a34ab8d32bad2215c7a16168e92bfb
SHA256

24ab44189a00cc5fb4c390f51ec42772e0ac033084de26f08f2a82e5b08a86f9
SHA512

cc5cacf8c028ea8ff08b6fa36cedd6409689d0a5993d92f521ded71084a899b539791507fb195f9eb1ff9981f1e4d77256a4cc4e021d3069fc0f65d3ee878f18
SSDEEP

768:vTBHC7RiUcnwgqKHmbrv0+o/WfiLSCi0Nm0xVEuj:LlC7wUcnwgdHkL0DWfqSCi0Jxiuj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76119ae1db950e98bcb3e2473673537f_JaffaCakes118

Files

76119ae1db950e98bcb3e2473673537f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19ef478544d8650e8768a914d97d1ddb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetProcessHeap
GetModuleHandleA
HeapAlloc

user32

IsZoomed

gdi32

GdiFlush

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ