f059b05ca9fd29d51a44221c6acd428b_JaffaCakes118 | Triage

Sharing

General

Target

f059b05ca9fd29d51a44221c6acd428b_JaffaCakes118
Size

6KB
MD5

f059b05ca9fd29d51a44221c6acd428b
SHA1

22b502ee606b5a70a27a1dc41ec4fcd0c73ddd1a
SHA256

d3b08a10dd018e183892bb432183e3b524363822da26149b90f0a4eeb9d18f86
SHA512

c3f7b6bf37637ff471d1e66189aec21120012d25a4a9d8bc8984520f531309ee3e3f792cbdfb2958e40742af09106e93bb810fa013da4ed6621746177d85830e
SSDEEP

96:zAncAasEMCzrOjXF2q8qhwYta6a7LSkM3mKdja91U3SAz7w4XLQ4S/:Mnc9sJCUF2q8qbtMpGmKdKa3SK7BbQ4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f059b05ca9fd29d51a44221c6acd428b_JaffaCakes118

Files

f059b05ca9fd29d51a44221c6acd428b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79f70c9cf65ddfdc3f8d0f35ef4b4e7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetCurrentProcessId
lstrcpyA
CloseHandle
GetModuleFileNameA
lstrcatA
ExitProcess
CreateEventA
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
CompareStringA
RtlUnwind

user32

GetTopWindow

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE