894e6b60fadae867e770dc4588250204_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

894e6b60fadae867e770dc4588250204_JaffaCakes118
Size

77KB
MD5

894e6b60fadae867e770dc4588250204
SHA1

02a393a6893fc0d6e7a53e8d70df6b1cb51f2287
SHA256

34b09b57ba6d7890be87b089ad2dac6b471922c5dc7f6470983d840de86c7e16
SHA512

0d622af94ce6ed93aef799e67f648d8f5c2fb9d6587716b36394364cd530f139befc96594dfff214928c0d1d1002b79e1f87c4535f77be154706502b28e35db6
SSDEEP

1536:xGSVJcsZ1qCWFaBlE6WW5ztkcKMg/TJPqhw:shsTqCW8XEJczeT/Mw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
894e6b60fadae867e770dc4588250204_JaffaCakes118

Files

894e6b60fadae867e770dc4588250204_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d086cfa2511f33d37a8abc23331ad04f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
VirtualAlloc
VirtualAllocEx
GetCommandLineA
GetACP
LoadLibraryA
ExitProcess

user32

LoadKeyboardLayoutA
LoadIconA
LoadStringA
GetMenu

Exports

Exports

_C8813sjM@20
1au_w9wwuC3vO@20
_3mxWG5Xb
_TxJJKsU
_v2JPZmz42D
_rkgPnztEgmAW
_UpOdukRWdOqtt
oVHufs@16
_QIZL2bPc@16

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text