d70f665ea1b4847a5a6d5dde2ad9b7ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d70f665ea1b4847a5a6d5dde2ad9b7ba_JaffaCakes118
Size

39KB
MD5

d70f665ea1b4847a5a6d5dde2ad9b7ba
SHA1

13bafd8bae9fa05440b2f6ee638118511dae1fd5
SHA256

7768dea2d50348daaf872bea6494588438d1c1136e767a8b9ac8c663b4ff3db9
SHA512

26a96527464a3a595cb491e19f93f525ce7e8b04b07cf9e51ce9249aee9194d13fe612c26cb5905e362fe85840903ba827956b695b473baafd16f1408bb48ee0
SSDEEP

768:GMuTUH/ri8WCLArH5HnN4dHorPdzwBVGXYN3P+1F6wv3Q:GMBWCLiZt4dHorlkVGXE+7v3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d70f665ea1b4847a5a6d5dde2ad9b7ba_JaffaCakes118

Files

d70f665ea1b4847a5a6d5dde2ad9b7ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7ac57d17c948321cb90d09db6cde9fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o:\Programmieren\Codesoft Releases\_NEW BETATEST\Amaretto_Crypter\galaxy2004 Version\release\Amaretto_Stub.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
ContinueDebugEvent
IsDebuggerPresent
WaitForDebugEvent
CheckRemoteDebuggerPresent
lstrcmpA
LocalFree
lstrlenA
lstrcpyA
GetCurrentProcess
CreateProcessA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind

Sections

.f0Gx
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ