b7904f078bca350108716803fd5812af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7904f078bca350108716803fd5812af_JaffaCakes118
Size

66KB
MD5

b7904f078bca350108716803fd5812af
SHA1

55c33ba14b7ac122c4562e0ea9c7aa6a66f1db60
SHA256

ccfac01d8da824b58a24aa0259e723a81d1787fb106391bb58ead1b634eea05e
SHA512

75c386e89821683a87334dd88c7b82bbfaff37e2a21a9b35d3751e2e9ba0a903a48ce2a063ba2672333f1999e8a4daa812a9184e13431c2bd679c4b55a903f38
SSDEEP

1536:7uVw1sV08pC8E7yMpnp8MJ1iFgHk2EbsaFKB9eZ0ffW:2FC8syG1iYcMeH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7904f078bca350108716803fd5812af_JaffaCakes118

Files

b7904f078bca350108716803fd5812af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

828a9c9be709ae229fdb86e8cc414a52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetPriorityClass
GetPriorityClass
ExitProcess
SetConsoleMode
Process32First

user32

GetMessageW

shell32

SHEmptyRecycleBinA
Shell_NotifyIconA

Sections

.ecode
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

j4kotbgz
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ