758241f8257aff5b65567d68b60b3803_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

758241f8257aff5b65567d68b60b3803_JaffaCakes118
Size

1.1MB
MD5

758241f8257aff5b65567d68b60b3803
SHA1

7365580990e4fbcdcd1e7de1d051f86da29af507
SHA256

3273f59644079a86fef270e57357add00d032b67fc2d9c3c761845258607f0d3
SHA512

b176db64026aa1f5e29dcfc3b31701d0d8f09373c89c78fba6684711adec3540072f6b603751eb542f5dd8570cd6e3645cf9ce5a2a27526a9d52e3026dc054c6
SSDEEP

12288:YnTJEO/addH5WrxZwmbGKkNNFb81THUvwGjn8X2De4nVSRbEjVraes7pCmP6pNK:YnTJT/adx56LWGTtGjahaNjVGRjKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
758241f8257aff5b65567d68b60b3803_JaffaCakes118

Files

758241f8257aff5b65567d68b60b3803_JaffaCakes118
.exe windows:4 windows x86 arch:x86

749e53eebef65052ef80e4ddf47a063a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetCommandLineA
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLangID
GetTickCount
GetUserDefaultLCID
GetCurrentThread
GetLastError
GetCurrentProcess
GetModuleHandleW
GetCurrentThreadId
GetUserDefaultLangID
VirtualAlloc
UnhandledExceptionFilter
GetOEMCP
WaitForSingleObject
GetModuleFileNameW

user32

ClientToScreen
GetSysColor
GetWindow
TranslateMessage
GetParent
LoadCursorA
InvalidateRect

Sections

.text
Size: 327KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ