d0c73a7c366de974983791bfefe5ac53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0c73a7c366de974983791bfefe5ac53_JaffaCakes118
Size

288KB
MD5

d0c73a7c366de974983791bfefe5ac53
SHA1

9714871385ef26bee675836318595b09a5b80d56
SHA256

633510d022b0e56880b725f043cd826448363268478629b5c5b39e0bde80d3b4
SHA512

3e21e2c8510f9707ba96f61734b727930a3451a298938ac9375adc9d80c4089749d2a7e9fe5ee90d36ebd9b34f5a015dab07a67516106716f89a07049eb7a411
SSDEEP

6144:WhPFtbsEh1yfIY5WAOTTz5l6s6+rHp7yNbqaBxrPa4:gttL3yfmDTf5ksBr16bHha4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0c73a7c366de974983791bfefe5ac53_JaffaCakes118

Files

d0c73a7c366de974983791bfefe5ac53_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e272069d3f9f3c33841e1ceb2ad36e94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetModuleFileNameA
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VTApJArE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ