1706d0b729aa7087a0f05eb25904836b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1706d0b729aa7087a0f05eb25904836b_JaffaCakes118
Size

144KB
MD5

1706d0b729aa7087a0f05eb25904836b
SHA1

f98222d113629408dfb0324d49a9476686ae2942
SHA256

11d4382ff2f266637591dba91e165f647070ab9e3b0f65b855273ffdd6c6f025
SHA512

0f72b5a4481ad10fadcadbcd192598cb1ccdfc27ee69827ee248455e50962b465e86bb175d55978cf5f6b7d0969ddfb9bbdb5ce45faa89f21a041085b57473b3
SSDEEP

3072:UZjS9WFKlxNnqoP7MyshNIyEIABZGw5ghvxhizbIDdiOTm95v91q:wO9V3BTP7MiyyZ9gN+4dZC/vO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1706d0b729aa7087a0f05eb25904836b_JaffaCakes118

Files

1706d0b729aa7087a0f05eb25904836b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c14faf212670af0dab2544ae58a171a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetCurrentThreadId
GlobalDeleteAtom
GetCurrentProcessId
EnumResourceNamesA
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
ExitProcess
GetTickCount
UnhandledExceptionFilter

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ