147211b13978916c925f9f9dda691c89_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

147211b13978916c925f9f9dda691c89_JaffaCakes118
Size

203KB
MD5

147211b13978916c925f9f9dda691c89
SHA1

ef1a80fc1e114630186151796ae94a8d3c2a20b1
SHA256

f515a419c1d601649b63d7f47748b0f3b83869997ca66445020f96301abd7053
SHA512

bc6b07b48644a94e199c50b7d46c1be2899440736d5016fa7a3f583609c30352cc58f7ac727253b2f1a59476d29ca14ce6933a988a9ab9c02c69fcc0ee9b1cf3
SSDEEP

6144:W7BVCbuAKpVJOB4h4HFJV3slNUUD9K8yC9O3:W7nCKAK/JPh8FJVmNUUD9xy3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147211b13978916c925f9f9dda691c89_JaffaCakes118

Files

147211b13978916c925f9f9dda691c89_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7628c6e32fb109271b2a003e3f3200b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC

shlwapi

ChrCmpIA

kernel32

lstrcmpiW

Exports

Exports

ScienceMooE
?FindLong@@YG_JDKUl98207long@@Ul26918729wex@@WE
?FindNortex@@YG_J_KU_LOADMODULE32@@U_SIMPLY_REG_STR@@WE
?FindRoten@@YG_J_KU_LOADMODULE32@@U_SIMPLY_REG_STR@@WE
?FindSmash@@YG_J_KU_LOADMODULE32@@U_SIMPLY_REG_STR@@WE
?FindSomehow@@YG_J_KU_LOADMODULE32@@U_SIMPLY_REG_STR@@WE
?RomCollapse@@YG_J_KU_LOADMODULE32@@U_SIMPLY_REG_STR@@WE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vibe
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.beso
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sorn
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ