e11241ab1707bbf678ec7d34d1901832_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e11241ab1707bbf678ec7d34d1901832_JaffaCakes118
Size

39KB
MD5

e11241ab1707bbf678ec7d34d1901832
SHA1

7cd66d5a237071958e9b1ebb2e69f2f31038f368
SHA256

ffe50f8a894c63aed9479841a7de1e4c1c16e23f90c056404aa33cfa72c69f45
SHA512

2d9a9e2f538345c90b525fd41051d5f1abfdc2e6e8747a2f773776ae19e23e379f01e9f522bfc4ed509d24bef829b6c9a3a19f1cf9b4127a1447a6f80d528778
SSDEEP

768:nMuTUH/ri8DWN87Pu1RkLVWy/SoEPcyqmT0oyOcmbjmaRU:nMBqNMu1mVWy/S6yX0TOvXmai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e11241ab1707bbf678ec7d34d1901832_JaffaCakes118

Files

e11241ab1707bbf678ec7d34d1901832_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7ac57d17c948321cb90d09db6cde9fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o:\Programmieren\Codesoft Releases\_NEW BETATEST\Amaretto_Crypter\galaxy2004 Version\release\Amaretto_Stub.pdb

Imports

kernel32

GetProcAddress
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
ContinueDebugEvent
IsDebuggerPresent
WaitForDebugEvent
CheckRemoteDebuggerPresent
lstrcmpA
LocalFree
lstrlenA
lstrcpyA
GetCurrentProcess
CreateProcessA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind

Sections

.f0Gx
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ