b07a6e60d1f669623ef79287d4f26091_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b07a6e60d1f669623ef79287d4f26091_JaffaCakes118
Size

172KB
MD5

b07a6e60d1f669623ef79287d4f26091
SHA1

b590e277ac81a7146c0a46e2f4fa46a214ef0d0e
SHA256

1a42d202f874b11fbde692a96ad33b98f336b8dc3d09a6e3d83e819a8525fefd
SHA512

d2915302feea259ad98e83a0d9f3aaba9548f187e711864c1e823fb0cce6389c304e8bbd251409332706d4546486d6cdcbd9d82d415360798f8cfa6e930a357f
SSDEEP

3072:Gtku72iseRyNaZNxn3mxg46/AfFwqhfWlw1UYvq2bK:GBgTMn3MgfmwtlGrLb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b07a6e60d1f669623ef79287d4f26091_JaffaCakes118

Files

b07a6e60d1f669623ef79287d4f26091_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4d467bc5fce5ceaf2932746917fcb874

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Windows Dir\FileExec

Imports

user32

GetPropA

kernel32

LocalSize
FindFirstFileW
FindResourceExW
LoadResource
GetVersionExW
SetFileAttributesA
FindFirstFileA
OpenEventW
CancelIo
OpenFileMappingA
GetCommandLineW
GetBinaryTypeA
CloseHandle
GetProfileStringW
ClearCommError

Exports

Exports

_PeekMessagePeekMessageA@0

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ