7799429f48e965004cd1df9abaea60d9_JaffaCakes118 | Triage

Sharing

General

Target

7799429f48e965004cd1df9abaea60d9_JaffaCakes118
Size

150KB
MD5

7799429f48e965004cd1df9abaea60d9
SHA1

b2261bdc6f9c51c443706be6c261dd4fcf53e963
SHA256

6dee1b05c0a53726ec4d0243bd85e5bc64873a41750fb23dbf70fdfb34c7adf3
SHA512

14a19436ce40c1caadee7b2fd76e85ea46df426a8e74587a7fc00812c318cfc4753b25c538e9b7cb5e74b48604d1bcced291ec987b4499f4c0046098d6d0a32e
SSDEEP

3072:0bm2raYSiJhEynrGbVPJJocLVoCawzoxfWBSlxXwF5lk+K8Ubtv:qmyEyrYVPJJpLvavWBAxXw3lf4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7799429f48e965004cd1df9abaea60d9_JaffaCakes118

Files

7799429f48e965004cd1df9abaea60d9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e272069d3f9f3c33841e1ceb2ad36e94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetModuleFileNameA
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VTApJArE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ