c1fdbb11a7cbf5d77e161a3c3f065fe7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fdbb11a7cbf5d77e161a3c3f065fe7_JaffaCakes118
Size

708KB
MD5

c1fdbb11a7cbf5d77e161a3c3f065fe7
SHA1

8f64c4771032c9b5f8e7f6b2ddead8d1494a26ce
SHA256

7c8440df43d2738adccd990569dac5b13a68fd7c297aebc4ccd03197bb200edc
SHA512

9f58612fd8c4ec006a9d04476ca97574b19ab4d9baa880fc3bedd37b97792f83ed3ef87a9a81c53d80726046c77ac7735808d2225a3ef29ace3368ec4bedb1b4
SSDEEP

12288:iZdBl1RuaEV4GgfqJDxMZdrcIq1L/cSzA7Of1ys3nE9PSE1i3zkbxf0qSSAoruvY:iZdBnRuj4G8WxMZFcIq5E2x1yS6PS1gH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1fdbb11a7cbf5d77e161a3c3f065fe7_JaffaCakes118

Files

c1fdbb11a7cbf5d77e161a3c3f065fe7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba414e3ef0e1d0bbb24b1bef138f5ffb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadContext
VirtualProtect
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PeekMessageA
PostMessageA

Exports

Exports

IsGbhjgfaf
GetPjivuoun

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA1
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 684KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ