f719ff9968494ea635a5fa61065aa3af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f719ff9968494ea635a5fa61065aa3af_JaffaCakes118
Size

7KB
MD5

f719ff9968494ea635a5fa61065aa3af
SHA1

fde5e6ef7868fa731f2f95afa7b677f864e11905
SHA256

b35602acca1df33b73f7ec0c46f8e2c6c02a3edf800989fe230744c278bcb160
SHA512

c7c4339ebf0599cc5ed9aa5c466630b4b2f377547d67c44b037ad814653e8810f57f797b45bdafe98e7c94ce896a9c7148c2e34f1e5a33bc23cd779261610a3e
SSDEEP

96:MIfcpdEQFt4b9txDvGLQKGzk6/8GoBQUSwfLI0q:MIk+bvQMVo2TCLI0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f719ff9968494ea635a5fa61065aa3af_JaffaCakes118

Files

f719ff9968494ea635a5fa61065aa3af_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b0df6b0a4f469eae2806ee0b6ea0b6f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetTempFileNameA
GetTickCount
lstrcpyA
CloseHandle
WaitForSingleObject
DeleteFileA
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ