741fc287719c8665498654bde9e0449d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

741fc287719c8665498654bde9e0449d_JaffaCakes118
Size

435KB
MD5

741fc287719c8665498654bde9e0449d
SHA1

21b80e021d8ff16a1386135beb278345f311b869
SHA256

5f0d9b9904d38b6ee9c59eec98a148a5c7f080c6a57bfb8d86a910408f6c3f1a
SHA512

8311bf13e1f3f5012e1fa08386d9dc2d4533a7461600654bf23a9f59ca3ac4ed4f6b0f9fd7b38b71466c8060a341449eb08603d13f37179a4434182af6194e1d
SSDEEP

12288:Se+1Bbv6NdnYpxevO5+ChgXv/i/vTLRzs32yhakKN:Se+PbWdnmEvO5fhgf27639w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
741fc287719c8665498654bde9e0449d_JaffaCakes118

Files

741fc287719c8665498654bde9e0449d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79d93aa3af0427e5b6c41bff8974404f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DVhVSMeb
Size: 512B - Virtual size: 371B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yitzvGXY
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ