059fad7e094f12b284aa577857d5b823_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

059fad7e094f12b284aa577857d5b823_JaffaCakes118
Size

73KB
MD5

059fad7e094f12b284aa577857d5b823
SHA1

62ab331dce0f50154ebb9a7ab5faeb5aba8e4058
SHA256

c16020bae50ab969cc8a432603cd9ea0f7c0ccc624ec01e1ea906680746c41b6
SHA512

f876005fed98ca18a0007d5ba87417d6885e68f02f45eeef2b87f17efd7b4465c12a7a37673a14bbe499d8f3f33fe2b4e1e3cd4ed5fe0e1b56e8beaa2cc3d41a
SSDEEP

1536:BPLaLSA4R/5vh8EvsKbeZHsBH/5z6i8TnmP3kqE5DO718Sko:BaLSR55pTbeMNp6iN0P6/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
059fad7e094f12b284aa577857d5b823_JaffaCakes118

Files

059fad7e094f12b284aa577857d5b823_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b959b4243655c2cd2fc4443489418b5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
WaitNamedPipeA
VirtualProtectEx
ExitProcess

user32

CharUpperA
CheckMenuItem
EmptyClipboard
DeferWindowPos

Exports

Exports

IsQpxwegn
Bshsjoagt

Sections

.itext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lmi2l1
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lmi1l1
Size: 65KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ