14901988cabce416d4fa70593abc94dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14901988cabce416d4fa70593abc94dd_JaffaCakes118
Size

15KB
MD5

14901988cabce416d4fa70593abc94dd
SHA1

a8846ab581e962ae5a286a6ab228be922af9939c
SHA256

c2d2b2c4859483f32aea20c953bf74aee23838c5b893b3c479e6666ef27376e2
SHA512

9d8aed93d5943844d048de7e7af47d9c6966f20c082731e61a387198995f0964048775456417788ca61890aba253e99a2841fab57dbbb96c3aeaefe25601a725
SSDEEP

384:unxFM7Ij4dsOk/c65zSyuLvnUojInKcPKn32:uxeDWm6SyInUoUKCKnm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pztrain.exe

Files

14901988cabce416d4fa70593abc94dd_JaffaCakes118
.rar
Liesmich.txt
Spieletipps.url
pztrain.exe
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 984B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 440B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ