767fbb488a31c44a23c1f7f6dd68c892_JaffaCakes118 | Triage

Sharing

General

Target

767fbb488a31c44a23c1f7f6dd68c892_JaffaCakes118
Size

292KB
MD5

767fbb488a31c44a23c1f7f6dd68c892
SHA1

2c8ff25738cdf6f20421f8dfde4d073869e8ea24
SHA256

44e1f8c8da402d9accb7be7faa2a7bcf4a0a773e5e828a8957eb54384210d417
SHA512

3175b86e94699fe53804ad7b64a639b2a4fe2c6b323f871f9866ba4aa6088ec7b9ade0165f8cd88ef0b03a8b990fc11b80d24a954f80de7399f86df598a596c5
SSDEEP

6144:J3uthpkxnq2/42eFkZ/wKXDPDbxKXN6Ofiyf387l8LmoEIGTtzMyb0yX2KiEfykZ:tutjmnD4bFkZ/wanxKXN6Ofiyf3Cl8La

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
767fbb488a31c44a23c1f7f6dd68c892_JaffaCakes118

Files

767fbb488a31c44a23c1f7f6dd68c892_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3f67f04e93e3ef73d249923743543061

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

comdlg32

PageSetupDlgW

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

TheHyper
Size: 221KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ