14b7f45bfdfe1c96fc46e9553e160779_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14b7f45bfdfe1c96fc46e9553e160779_JaffaCakes118
Size

184KB
MD5

14b7f45bfdfe1c96fc46e9553e160779
SHA1

342e4bb60fd228fcf03cb878d6fd702aed4761fb
SHA256

2f801fdcd4380c5019a93a90ecd971d6130c6bfe4bf79069770578d18233cfd6
SHA512

d645a2535e8ca9d1d8329f752ad9ab2deee7a7ca68651495823ca937cb4f6be126cd5a5795683ab5012339cab3f579d3058a3ea337fc6cf1457d8d3b5840b26e
SSDEEP

3072:LRxacRnUf9yXeGouh2SAjvBg+bWpw6s7+IfbCf9I/IgeO8Yq6mFDJJIyIsP9X/Yx:LqcgeeGoLBrK+bzt+8bG9OIHO8d62TIH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14b7f45bfdfe1c96fc46e9553e160779_JaffaCakes118

Files

14b7f45bfdfe1c96fc46e9553e160779_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3582bd4b80f43bdf949a05035db61ccc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowDC

kernel32

GetCurrentDirectoryW

shlwapi

ChrCmpIW

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rt_ecx
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_eax
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_esp
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_edx
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rt_ebx
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ