a265223526abe352177b77231d644ae3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a265223526abe352177b77231d644ae3_JaffaCakes118
Size

85KB
MD5

a265223526abe352177b77231d644ae3
SHA1

975bc01603ea6ef00a1a9aa82f7115e0a01afe65
SHA256

66fcbf6aaff16849342d23dceb746d21332fb82a6ddc7990529b406503def367
SHA512

c1a39c100deb5bbfa0c4da492b30c4f32a722acd3bb1a33be21d901c9f4b64803a0c599995f4006d7e6510e1230282de271bb9d20d92f7da3b3fb1b9e89f7fa0
SSDEEP

1536:Tbm8o+tsaIF2aSz+pagxFZIBWFtepFNVDib8XDHOqWb78wT183ENGa8UZ3z9w:e8o+tsaIF2pKptLIBGepT8gzH+78533X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a265223526abe352177b77231d644ae3_JaffaCakes118

Files

a265223526abe352177b77231d644ae3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2e66e18dea33f50fa6343b049d886a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
SetErrorMode
GetWindowsDirectoryA
SetCurrentDirectoryA
VirtualProtect
ExitProcess

user32

SetForegroundWindow
GetClassNameA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.n1sec
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsec
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ