722136c106df4d30b08ab16f7eedb8f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

722136c106df4d30b08ab16f7eedb8f3_JaffaCakes118
Size

81KB
MD5

722136c106df4d30b08ab16f7eedb8f3
SHA1

61fee318794eb3987ec0b623e49db3ccc08f070d
SHA256

474971da8a225530716adb1ab09d4512f276ad752cb6ca832e4dbfbefff76b87
SHA512

884940661fe875d48186a9455475f565100596f156e1c2f21691792c2cdb45fd73ef3b6b036bc50e86dd7a94911d2dd2fd8887a738b4c4cb4575df8664d81465
SSDEEP

1536:CMyocrWL1iWUGamEfmsaGheJX/SKbdXEetLiOfPb7:TyocrWFUqwmBGY/SKpEKXb7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
722136c106df4d30b08ab16f7eedb8f3_JaffaCakes118

Files

722136c106df4d30b08ab16f7eedb8f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ca149e64fd3e0f4146aadcf98a1c353f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow

kernel32

GetTickCount

Exports

Exports

��rainAgency@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?TrainEraser@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?TrainForward@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?TrainMove@@00GPAUHINSTANCE__@@U_COMMPROP@@;F
?TrainSimulator@@00GPAUHINSTANCE__@@U_COMMPROP@@;F

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 377B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ