75303487df0b8d0b93b0933a32d749f5_JaffaCakes118 | Triage

Sharing

General

Target

75303487df0b8d0b93b0933a32d749f5_JaffaCakes118
Size

84KB
MD5

75303487df0b8d0b93b0933a32d749f5
SHA1

35a882a9aae5851ee8c1f95d7d783929e95e2c73
SHA256

69ebd531ef5c3158600c248c967c12ab1c62a96f51e86618df93db24a0c6d9df
SHA512

712f53576ab26fd8f55d661b2842792bfdf9cf92b8f4b8f55fd0aebaf583e3d634a1c5eb6820474da81c649829a1ed260132c87d4bfbc74a286f326670c1dcfa
SSDEEP

1536:hMBfWKLC4/aw9cm4mVUr/IEzi5vzm1Ltghffz1uv8J7U3ApT3viRfNVuBtZ:0LLJzmJtgYiVFKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75303487df0b8d0b93b0933a32d749f5_JaffaCakes118

Files

75303487df0b8d0b93b0933a32d749f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7ac57d17c948321cb90d09db6cde9fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o:\Programmieren\Codesoft Releases\_NEW BETATEST\Amaretto_Crypter\galaxy2004 Version\release\Amaretto_Stub.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
ContinueDebugEvent
IsDebuggerPresent
WaitForDebugEvent
CheckRemoteDebuggerPresent
lstrcmpA
LocalFree
lstrlenA
lstrcpyA
GetCurrentProcess
CreateProcessA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind

Sections

.f0Gx
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ