9d79334621878eeae5966eb782f10eb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d79334621878eeae5966eb782f10eb1_JaffaCakes118
Size

100KB
MD5

9d79334621878eeae5966eb782f10eb1
SHA1

1f0e49ef4c0fab5f854d328ea8a8eefe049ec429
SHA256

16e87b12994f474c2c3f92d4ca13c63e9629f4c44f872ab6862191849d7b8018
SHA512

9f0f12d4449511ad1a3d40a6ac1ee784b4c6f1c232d31c68f461c4b2916c9432e54efecacf9b1b2f9bc6db40875896e69958fa6c5b04272721841e2e55eb8eb5
SSDEEP

3072:+TncTPcvClNcy5jUg8ov5ZsxTFEDk2b97:iUgCV5ySkEDk2B7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9d79334621878eeae5966eb782f10eb1_JaffaCakes118

Files

9d79334621878eeae5966eb782f10eb1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

934381a85d55af4033da1a769f2cce1d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
SetCurrentDirectoryW
GetShortPathNameW
GetStartupInfoA
GetModuleHandleA
GetSystemDirectoryW

shlwapi

PathAppendW

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE