1250746f6c6616885019466bb307680d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1250746f6c6616885019466bb307680d_JaffaCakes118
Size

88KB
MD5

1250746f6c6616885019466bb307680d
SHA1

4309a1dcb21c2b18f8b07fdbb0528714e01643a3
SHA256

e5dd30ff09b0f64f1c4c7e7d49bafd7755769f4279a17cbdf144d33e363791c2
SHA512

18c4e09ed964d75ef910ea9dafd569dc698d56f3d1087270bdd36bf986bc6f7aae435e406b02b61c23e8ad908fc1dd3d50f816485a7879ae4818da0d1ceb1db3
SSDEEP

1536:LF3D9lQkIhYnGJeyTLoV4WlbnrbEjqZUl+WmOOXoAvJXqepNemS0NP:LF3cbhYGJe+LoVxlrvE24fmOUvpqeprz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1250746f6c6616885019466bb307680d_JaffaCakes118

Files

1250746f6c6616885019466bb307680d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e21bfa9d7d35db5faf907cbc2ff2bb98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetPriorityClass
GetPriorityClass
ExitProcess
GetFileSize
DebugActiveProcess

shell32

DllUnregisterServer
DllRegisterServer

user32

GetMessageW

Sections

.text
Size: 17KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

p1kljeqv
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ