f8a6f7ebc0a50b7fb894b841c7f86736_JaffaCakes118 | Triage

Sharing

General

Target

f8a6f7ebc0a50b7fb894b841c7f86736_JaffaCakes118
Size

3.2MB
MD5

f8a6f7ebc0a50b7fb894b841c7f86736
SHA1

3388a58a896cef953dc94e72308198403b021175
SHA256

72b6e2db1cf1cf739514147d8e3387246d5bb60f342e34865fa836929a2b3b99
SHA512

8b0a1d001d0b7661bb67d620c6067750739414eaeeca36535fa1102bf95b77fbc9fecf057d50af43fe62ffc0f92ad6bfa56cf25fbd3a931ff71e60b9bc0b031b
SSDEEP

49152:mm/lFop9lF4y/DLRBKFv8B47MfSH2X1b/ZXQ76yAZb6o/zNAd2U04jWeI:z0ZnRB5BQ2XpZXFyAZr/82U08W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8a6f7ebc0a50b7fb894b841c7f86736_JaffaCakes118

Files

f8a6f7ebc0a50b7fb894b841c7f86736_JaffaCakes118
.exe windows:6 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 935KB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

izmwrqba
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nkdvcwwp
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ