7e009d25176572881fa9322dc4f075c7_JaffaCakes118 | Triage

Sharing

General

Target

7e009d25176572881fa9322dc4f075c7_JaffaCakes118
Size

312KB
MD5

7e009d25176572881fa9322dc4f075c7
SHA1

d0b17a0cab2fd44480fd782e62528d518a41e2a5
SHA256

5ebf5e0cf9a91d48b42971790f2f5841585429604fa78b6ed9a9a3d0b4c5acd0
SHA512

c066e0f1b11200d7c31ce6648638d237ea8adecf3964d2ad4f984807973073ffa3bc02a96566f36b85e765d48820ee516da936fb16acf7e9099fd1a957c3dc64
SSDEEP

6144:l1wWsAmf6Uj3Bav0xUzgSwnEaY3+2/Pv3yhTRSbiWI3Uu7DTOogVe:0VAbMccGcSwnjQ7HAIBI3tD6le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7e009d25176572881fa9322dc4f075c7_JaffaCakes118

Files

7e009d25176572881fa9322dc4f075c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abf74243ad26b0c11ec7e71dcfc37d4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

user32

BeginPaint

msvcrt

_adjust_fdiv
rand
srand
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 307KB - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ