443819ddcb3210c7a2d7cf27ac0d2d7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

443819ddcb3210c7a2d7cf27ac0d2d7c_JaffaCakes118
Size

379KB
MD5

443819ddcb3210c7a2d7cf27ac0d2d7c
SHA1

af4dd57c10639c0b660722f69682ef2c75369346
SHA256

11ec783dffd8c37b63a1235746c9ae45befacdc738bf154a0dcc63a9fa4e6ff5
SHA512

a7cbc1c1ca4c9d0c7363e1163ea704829c6ef0f2fb7641c25e01938443c992903df623f9a7b394636894d9eac250ed7094d51423b61820106fa23f23f6124ac9
SSDEEP

6144:Zj58NRIsT7CL2zjg2EPi6Eae5uWg2/zgjmE87WMbjlNd7JIK8GlEsOsz2gKPoMjo:V5Ynimjg2EqzaegL2/Eq3fPIH6FOsBMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
443819ddcb3210c7a2d7cf27ac0d2d7c_JaffaCakes118

Files

443819ddcb3210c7a2d7cf27ac0d2d7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

371362542a3bff159491f0be175988c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetSystemWindowsDirectoryA
SetComputerNameA
GetComputerNameA
VirtualProtect
ExitProcess

user32

SetFocus
IsWindow

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.new1sec
Size: 8KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 365KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsec
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ