ced7e334145e389e64249ec99be9c59a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ced7e334145e389e64249ec99be9c59a_JaffaCakes118
Size

28KB
MD5

ced7e334145e389e64249ec99be9c59a
SHA1

e43520cff02dac9603ffee9b95a46ac55493df20
SHA256

1cd51b527d5fc33ef1c2e671b5b10370afb2f390e264b5288bc88167c1818886
SHA512

9503df50db6ed7a1820c5aa9f9d666af79819b35a17c983bdb6e74eb43f6830c3a31b856981ec7a21001f55a2b498472cf486520bd722cb3eccd1bf7003660d3
SSDEEP

768:PFmKSiqe02s11ygu76LwZGS9bcmjCULvA+ScTV:PFmKSiqe02s11ygu+lEjbTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ced7e334145e389e64249ec99be9c59a_JaffaCakes118

Files

ced7e334145e389e64249ec99be9c59a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a059b85c97c358d714cfc6a2a8c0c0c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\gzuzzzgzz\hihcibch\gigzzze\huvj uvzubu buvuuvu.pdb

Imports

kernel32

GetLastError
CreateFileA
ExpandEnvironmentStringsA
CloseHandle

user32

wsprintfA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ