07670d7e2bbc01b1b220d9132a0e5b1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07670d7e2bbc01b1b220d9132a0e5b1c_JaffaCakes118
Size

616KB
MD5

07670d7e2bbc01b1b220d9132a0e5b1c
SHA1

b315bef3e159be6af3aaec0cdc5e6bea69c8a8ef
SHA256

e9e6a5b24c738dc9594355a6953bd8cc73fffbe71d3d05e8019f216ecad5c335
SHA512

0d7b9c125a252b489b4d410de1d1c71a9d2722c4b2c2ac2810137b2fb2acfb2536865388821ec85755d0bec4363720e745d193aaa227c0f3106b0a81ffaea43d
SSDEEP

6144:ui1MX1c9PrVrafxEL8PfEB6tJrto9y5C:uuZVOuL80BWt+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07670d7e2bbc01b1b220d9132a0e5b1c_JaffaCakes118

Files

07670d7e2bbc01b1b220d9132a0e5b1c_JaffaCakes118
.exe windows:0 windows x86 arch:x86

168aecddd46e49bab5e36f7feba40f71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindNextFileA
FindFirstFileA
ReadProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion

user32

RegisterClassExA
LoadCursorA
LoadStringA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA

msvcrt

strlen
strcat
strcpy
memcpy
strrchr

Sections

.unpack
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE