1687a671b2455c653df3cbb53e194188_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1687a671b2455c653df3cbb53e194188_JaffaCakes118
Size

26KB
MD5

1687a671b2455c653df3cbb53e194188
SHA1

a4b02adda69ddb2d38b94435b00d40e8d1943601
SHA256

d3e8e32e3fcdd7b989a3ed16a4730082e9f1aa755a016d94dd7f11c54072af2e
SHA512

7df08d885f5d42d725f8c5015ec555d5791b4a8a288b6314398e292b87bcca69ad2e984173b0872ec9aee18053a69e499e89f56e3c59f803e17c53a8169e7daf
SSDEEP

768:bfd8EpSUbty+/Opn7ElJ7xt7LglcRqgXXKa:51SUJyhQn4lcYgXT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1687a671b2455c653df3cbb53e194188_JaffaCakes118

Files

1687a671b2455c653df3cbb53e194188_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7472efe3e326014721c86ed86f8c3e21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindResourceA
GetLastError
LoadResource
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

user32

DispatchMessageA
GetMessageA
KillTimer
SetTimer
TranslateMessage

Sections

.text
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE