78e49586952c31340ccf886ee34ace2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78e49586952c31340ccf886ee34ace2f_JaffaCakes118
Size

35KB
MD5

78e49586952c31340ccf886ee34ace2f
SHA1

a2583a92d8f64771c5ddcb1da2062b86d431c396
SHA256

d1b98551d4479aa1338e554e2ab48f1e2f6cd374f6ea55636923d184d403c50f
SHA512

5417b6f5de10006c33fc73fa535dd05c3bc05adea104bebcade663519a8e42796458fdb8eda5c61d8fa661f265241faeaf2ab67b11398c5f6c3a57d3b1280645
SSDEEP

768:B3BjiZl0EdD1w4GEiWAAZtCioONx8GiJ7AsACGJUss:5BOH0EeEIALoOY/0CGJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78e49586952c31340ccf886ee34ace2f_JaffaCakes118

Files

78e49586952c31340ccf886ee34ace2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6bd1e790c51bfa6654dc1ffe30edeec7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapCreate
lstrcmpA
MultiByteToWideChar
GetFileSize
TerminateProcess
FormatMessageW
SetUnhandledExceptionFilter
VirtualProtect
HeapAlloc
lstrlenA
GetACP
SetStdHandle
FileTimeToSystemTime
GetModuleHandleA
IsDebuggerPresent
MoveFileWithProgressA
GetLastError
TlsAlloc
ExitProcess

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE