f903743355154f9826cc36275542b317_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f903743355154f9826cc36275542b317_JaffaCakes118
Size

3.3MB
MD5

f903743355154f9826cc36275542b317
SHA1

45cc8b6c102d071d52f3b07155eba1fdcc02c493
SHA256

14360413d91f176d6a11578da1303afb89230e4e07aa5b04dea58e9694f31aaf
SHA512

9b897a3e92b0f8b44edd06006260ae29328c562e03a4f7680667b1cc138bfa35f14c685e93d6888cfb30a885e9d046b26494f4faa6c9e5cf36d2ed59710f1872
SSDEEP

98304:GK/oQWfgZgVAp9XbtPZTpzwM7zK9Ov9c47/FCs:PAQ6gZgV0htPRpzZ/nVc24s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f903743355154f9826cc36275542b317_JaffaCakes118

Files

f903743355154f9826cc36275542b317_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a9a40a8f90483fa79b633b308d37f18f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExW
LeaveCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetWindowPos

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata1
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ