1027674eb670fe522c4acc3bd80dcf46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1027674eb670fe522c4acc3bd80dcf46_JaffaCakes118
Size

76KB
MD5

1027674eb670fe522c4acc3bd80dcf46
SHA1

9440731e45633252893d6410fdc2febc8b4fa34c
SHA256

446a9e1417e271bdcfcec517f4a8d3658b4d0b5481e520c91bfc40439c7e633b
SHA512

ce3be967073f2aae1e0701bab4859a2f192a37bb7d63989e08403c0a98d9ed1e78dd5bc59a20da8cd9225c7ca3ad2dbcacdcc2efe704061025f734b8e244dee1
SSDEEP

1536:EzID2O6AWxIt6tbMe4h1gPT8jc+P6vzYufxGahfO5ffZLkINTqh2:EzIadlCnnurvzHhhfYfRLkH2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1027674eb670fe522c4acc3bd80dcf46_JaffaCakes118

Files

1027674eb670fe522c4acc3bd80dcf46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdc4d80357a3ddc0799a98a24c3703bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
TrackPopupMenu
IsWindowUnicode
UnhookWindowsHookEx
SystemParametersInfoA
TranslateMDISysAccel
GetMenu
ShowWindow

kernel32

VirtualAlloc
LoadLibraryA
GlobalAddAtomA
GetVersionExA
GetVersion
ExitProcess

Exports

Exports

EOgSi_SZHJmMFj
pDeWobm9U
_bKp76_nC@24
0kAjZiRh2I

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text