74a13c22da413e2d66a2c54af3e306ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74a13c22da413e2d66a2c54af3e306ae_JaffaCakes118
Size

4.2MB
MD5

74a13c22da413e2d66a2c54af3e306ae
SHA1

f9e9a28be9df06d4ff69677050454414a831aed7
SHA256

a6c308eaa67b7cdd98c9873a72f9f11ecfecc006f253bd87eb55291164cf1f61
SHA512

55d373ec77753fe53a010fe3fe14ea5bf650a3fe4bce7fc987a1c9bf2d72533eee75843c03a6512d3b77b2cf471c7199d057ec551dd5e7faea8db4b1b52f90d1
SSDEEP

98304:wu+vAagrBoc/AAw+X7FMgZRRIN7xtlKJL+xxtm:wueUBfAAhXhJRRS1xY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74a13c22da413e2d66a2c54af3e306ae_JaffaCakes118

Files

74a13c22da413e2d66a2c54af3e306ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5fb8e6ef4c3c0d2d0a03e4354a71bd1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

EnumDateFormatsW
GetModuleHandleA
GetProcAddress
lstrlenW
SetUnhandledExceptionFilter

user32

GetMonitorInfoW
MessageBoxA

psapi

EmptyWorkingSet

Sections

7
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

6
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

7
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

7
Size: 2KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

bqW
Size: 130KB - Virtual size: 128KB

IMAGE_SCN_MEM_READ