741bce690bfcfde64fdd730ba86fb84b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

741bce690bfcfde64fdd730ba86fb84b_JaffaCakes118
Size

63KB
MD5

741bce690bfcfde64fdd730ba86fb84b
SHA1

fd48e824ec61fb44761a3f1c969cd54ea84f47ca
SHA256

513b9621101cca008cebf845bb09bf45b3dfb9b526c54beea327efa2c7d9b022
SHA512

0967c9672873131713362f448061d67f38f45bc5cf0a6183ebd0e78c0126d6b32387fc6dd9cbc7b14820a6f19415d784aca59cc8e47c0b9a9a736500922bd4c9
SSDEEP

1536:89Qrb+IhbmD8jGo12K2o4W9ukbInkQhqlyc0ovlEuQ9wF:89U+IwDQ12M9uQIUlyzH9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
741bce690bfcfde64fdd730ba86fb84b_JaffaCakes118

Files

741bce690bfcfde64fdd730ba86fb84b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0994f514445413c9c165c9ea46ccbd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeW
IsProcessorFeaturePresent
OpenWaitableTimerW
RtlUnwind
GetProfileSectionA
GetProcessHeaps
SetClientTimeZoneInformation
GetSystemDirectoryW
GetProfileStringA
Process32NextW
BaseUpdateAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE