a65729a4ff5e9c42457e5acfb3d03b94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a65729a4ff5e9c42457e5acfb3d03b94_JaffaCakes118
Size

93KB
MD5

a65729a4ff5e9c42457e5acfb3d03b94
SHA1

d6bbc9311e0f02d12f5d4711086dfa03d526b667
SHA256

fa9da593ee84ceff6185da55067ab9e9e2461dd2f069dee14bb6d207dec5b799
SHA512

42391e586f16eca902e94c8aa9ca42e15f0d80edb826853aba0a5859f203990396a525d604816d61b2f6996cb27ca73083f20853c3948d822d375ec23099362d
SSDEEP

1536:ZExaIHfUgq6YF8OLDeH8UEnHTHvUTKpf25fHegWLEaD2ptrhELjwoNvrs3HU:ZERHfSz8H8hHTHMT/ah2pAvwSTs3H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a65729a4ff5e9c42457e5acfb3d03b94_JaffaCakes118

Files

a65729a4ff5e9c42457e5acfb3d03b94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7460cbbe6f649ce73c20da274c2b3fcb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessagePos
CharNextA

kernel32

Sleep
VirtualAlloc
GetCurrentThread
lstrlenA
GetUserDefaultLangID
VirtualFree
ExitProcess

Sections

.text
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsfwer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ