75a95f5a8aaa5b48f88e7387c27300c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75a95f5a8aaa5b48f88e7387c27300c8_JaffaCakes118
Size

60KB
MD5

75a95f5a8aaa5b48f88e7387c27300c8
SHA1

6ab466c6ca1cc9fd7233d5ec8c938a096ba433c1
SHA256

07d01bd468a631aa28d16cedd0cb4a25847f186d41d84f3db99bb27c3b4ab704
SHA512

2c534a50706e43f2a17239d0165d772b691608efb7d95a87321388f3dab79738bb16575534559bf59e947fda627967ba8b459ed3b2259109b61c9b593ef19d2c
SSDEEP

768:0cfUSnrsD70RFfZjgBm1eKkavs5YJ/5ABXF4/zkRq/y4NCdBYlLujqP0O3D:FMorsD70R7j71ewhaXYLOYldMWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75a95f5a8aaa5b48f88e7387c27300c8_JaffaCakes118

Files

75a95f5a8aaa5b48f88e7387c27300c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b103adfe670c378cd5893b04aeaf8b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
FileTimeToSystemTime
FormatMessageW
GetLastError
TlsAlloc
TerminateProcess
MoveFileWithProgressA
GetModuleHandleA
GetFileSize
SetUnhandledExceptionFilter
HeapAlloc
MultiByteToWideChar
lstrlenA
SetStdHandle
GetACP
IsDebuggerPresent
VirtualProtect
HeapCreate
lstrcmpA
ExitProcess

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ