b7e06dc9f0c028f55f94a4ca44943f5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7e06dc9f0c028f55f94a4ca44943f5a_JaffaCakes118
Size

22KB
MD5

b7e06dc9f0c028f55f94a4ca44943f5a
SHA1

3e4b8456996da261c138acb69120f83a8be53809
SHA256

f0d33b4a20c5e1d4be2c2feb0acb34f6e245c3c2dcfdcab1fe33f106bec69ae3
SHA512

679ca9f1683483c9d35a08a0cfffc7a7b67d415ca325750d8d5f443913d62ad9603f4d38153aa6db69ca9b51a1e06d88986e3712532ca47f9e8746b5b7a1f04f
SSDEEP

384:97Nlt5tyAewqpD3y34uhR0NWp6JZZJ9/ZCb7k:97ft4wq5APhRvpYZ7hIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7e06dc9f0c028f55f94a4ca44943f5a_JaffaCakes118

Files

b7e06dc9f0c028f55f94a4ca44943f5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c53e87904f89847b22e171d1eaafd62b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
VirtualProtect
LoadLibraryA
GlobalLock
GetCommandLineW
GlobalUnlock
GetStartupInfoA

user32

PeekMessageA
SendNotifyMessageA

Exports

Exports

BeginSspxjgljip
Cwryscusb

Sections

.text
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data1
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e4355
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ