755b53f76058243f23a7406307476b55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

755b53f76058243f23a7406307476b55_JaffaCakes118
Size

208KB
MD5

755b53f76058243f23a7406307476b55
SHA1

2d673f9b0ab66456b4edba19568fe661feaa7d90
SHA256

47f01f62b3270c651cdbf3bd7ce9aa3f3ddd28904a577f4c38c2d699dace54f6
SHA512

32e0461ee74048e05148bbb7e510205b6b94f3b86f2228d54b935f8655eba3e6bf4f1c36de0b36592f01e1a115f928424ae949cbec3f6f773a18af87d2f714d8
SSDEEP

6144:b3/o7T4v/EXGsSK0Q/V5SqJC+e3021wtDPTvoEsAFAq:yG+UDLsbwEs+Aq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
755b53f76058243f23a7406307476b55_JaffaCakes118

Files

755b53f76058243f23a7406307476b55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63bcef11200eb164319a6529b20127df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeEnvironmentStringsW
GetDateFormatA
GetFileAttributesW
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemTime
IsDebuggerPresent
LoadLibraryA
LocalAlloc
LocalFileTimeToFileTime
SetEnvironmentVariableA
SetEvent
TlsAlloc
TlsGetValue
VirtualAlloc
VirtualFree
lstrlenA

user32

GetClientRect
LoadStringA
ScreenToClient

gdi32

GetDIBits
SelectObject
SetBkMode

shell32

SHAppBarMessage
SHCreateDirectoryExA

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 863B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ