a5b2a77290e332aafa0885fb0a877059_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5b2a77290e332aafa0885fb0a877059_JaffaCakes118
Size

28KB
MD5

a5b2a77290e332aafa0885fb0a877059
SHA1

a32a1f6ae9f1c2ac95269f8072979e94591d9ee7
SHA256

fd3ce22f0c8557ad5218a15905f7fcb638732729edf11844316c61da4958109a
SHA512

a20c7255e967d8234ec2a4a99883a0876619e721bbc33ae2f85c8205f751d27cb67329f3cb831c699342b57e4170cdcbd4ce9b6e6b01bce52d73cec64aa96bac
SSDEEP

384:WGB3dQe0AP1XVCYt8jiR5FsQVFCjJKfspbwkshVyzJTEAxTNFM9VgD7zL:DNtQ9jI56QVXspbwkshVMxxQ9Vgv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5b2a77290e332aafa0885fb0a877059_JaffaCakes118

Files

a5b2a77290e332aafa0885fb0a877059_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e375fae1e56661edcfb77b789bbf9540

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
LoadLibraryExA
VirtualProtectEx
ExitProcess

user32

CharUpperA
CheckMenuItem
EmptyClipboard
DeferWindowPos

Exports

Exports

Gufsepghb
Wftsyabrav

Sections

.itext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lqt2l1
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lqt1l1
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ