753597e21a558a3d0dc6b551c3091b0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

753597e21a558a3d0dc6b551c3091b0b_JaffaCakes118
Size

279KB
MD5

753597e21a558a3d0dc6b551c3091b0b
SHA1

39aed6dfb3213b4ac2c113d7b6114e3765e7b849
SHA256

744008bd1c3119387083b3c48f1be6a2636abeb8f2c62056d258d96e7c1617e5
SHA512

33e21b3a2499685f6220a26815dadb826e69ed72093c81e7562431c5ce85e609885dea660d7016c881721ab97937db9039b6a60c0e9e37ac190cefca03608f4d
SSDEEP

6144:hDdB6sIgVyFs1n7VIFDIgH5C1Ty1LwMeNVtRVMNFypT6wnt:hDH63gVyFgn7+FDIgHo1Ty18M8MCpJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
753597e21a558a3d0dc6b551c3091b0b_JaffaCakes118

Files

753597e21a558a3d0dc6b551c3091b0b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fd58791dfd329a2bf8d3a9b2ecd54514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid

kernel32

LocalFree
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

gdi32

GetDeviceCaps

user32

ExitWindowsEx
MessageBoxA

comctl32

ord17

version

GetFileVersionInfoA

Sections

.text
Size: - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.upx0
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.upx1
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ