83be5449ad3dd7193f665bfc8d6fe834_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83be5449ad3dd7193f665bfc8d6fe834_JaffaCakes118
Size

76KB
MD5

83be5449ad3dd7193f665bfc8d6fe834
SHA1

100f99a9ffac4ae8bc33f60ec7a53e02c7dde083
SHA256

ae531fbfc30a03eedb3aa2ad06489cde7bb5d66a296045abca33c9b41a0c6751
SHA512

fc29d49d4178aa20bd6a8a9bc3b879a5f9be74bfa066776625755b9c24cd123ed7dfb9025372596300ac2ef69a4675ab607b02b9fb05ec14157ef70a7f40d6dd
SSDEEP

1536:UZCwJTGIZTYFIJzQ/MpbhuDvF7KMSCwIk5b3j+bqqJr7TKnhCtuMoa0yO:UZhJDy0zQ/MRhSZKMniSmqJ7KnhJxa05

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83be5449ad3dd7193f665bfc8d6fe834_JaffaCakes118

Files

83be5449ad3dd7193f665bfc8d6fe834_JaffaCakes118
.exe windows:4 windows x86 arch:x86

404cd78c7338cd6369b954014b2d4f22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtect
ExitProcess

user32

CloseWindow
BringWindowToTop

Exports

Exports

SetCachtlsl

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sec2
Size: 128B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ