a806a8cd55a709863aadb416fb210b58_JaffaCakes118 | Triage

Sharing

General

Target

a806a8cd55a709863aadb416fb210b58_JaffaCakes118
Size

142KB
MD5

a806a8cd55a709863aadb416fb210b58
SHA1

0fc92b039e916c6721b202be74f47046aa14f89b
SHA256

130dc6e3a2e25652fede712bdc94d4a58bef4e745e438a23553a19d618c6bfba
SHA512

131c10ace1a23632bd2fb32eff67261d2b0b629743f6abe800c706894cfda17d862242158b41db89ccfd28e8144ce3f79703de1b6545619d0769fa2f9024f6e7
SSDEEP

1536:dfvYrTpCip2NiL2eK+gxw0Vxes7/imsaoIzmdH2ZiBr1u:+3uFGexegDroUGWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a806a8cd55a709863aadb416fb210b58_JaffaCakes118

Files

a806a8cd55a709863aadb416fb210b58_JaffaCakes118
.exe windows:5 windows x86 arch:x86

11767ec89264d8bdc817b46081a18915

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

VerSetConditionMask

kernel32

HeapFree
GetProcessHeap
GetProcAddress
LoadLibraryA
LoadLibraryW
GetLastError
Sleep
CloseHandle
GetNativeSystemInfo
GetCurrentProcess
SetLastError
CreateMutexW
HeapAlloc
VerifyVersionInfoW
lstrcmpA
lstrcmpiW
LocalFree
GetVersionExW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
VariantInit
SysAllocString

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ