029eb7e7330501fedc49467184761624_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

029eb7e7330501fedc49467184761624_JaffaCakes118
Size

74KB
MD5

029eb7e7330501fedc49467184761624
SHA1

3793176420322ae41d4f2cdb65d7e1a8dea79040
SHA256

dcc524371bf4e7e0cba5982c2cb5cfe6f34d626ef3f8ef6d52344268449c2305
SHA512

7d7290f7b081f807ad9781b5397068cee154ffddd2310e9aea07f19a14f5894f64ffc83d480a7b1e9fd94480dbb66ee8708bc3d20c52468b1a892d8a309f229b
SSDEEP

1536:pA5+83jL+Nsz7aZ7FEY+9z6bV+UKcp6jSIFQom0oPDPKpA9bccXD:pA5+/Nce7+MUnTnFQom0I0JcXD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
029eb7e7330501fedc49467184761624_JaffaCakes118

Files

029eb7e7330501fedc49467184761624_JaffaCakes118
.exe windows:5 windows x86 arch:x86

32bcc47105f6463c29f6b19fa136c704

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

VkKeyScanW

shlwapi

PathIsUNCA

kernel32

GetCurrentDirectoryW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rt_ecx
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_eax
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_esp
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_edx
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_ebx
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ