ba8dd5eacf990e08bd61dbbc89328600_JaffaCakes118 | Triage

Sharing

General

Target

ba8dd5eacf990e08bd61dbbc89328600_JaffaCakes118
Size

320KB
MD5

ba8dd5eacf990e08bd61dbbc89328600
SHA1

098712007722fb34b4d47a8d0b289a3f0ee12667
SHA256

62b33d9024e2987cb8326827b9fddbc81c74f8bf10abdc8ea7ff7325d3646e66
SHA512

9a9b6295a0bd7ea551c4577f6e5d476b3a5885794f1bc24dd56b1c1b7dc77ae7fe0ca0b5b18f949fb5040b533641f86bf07fa93e66b4626c0b88408fc41d620d
SSDEEP

6144:qWkHk7Gknm0qSDlhHFj6SWC1e3jKb9wWF/QYD53:8E77m0DhpFOSWlWnFrDZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
ba8dd5eacf990e08bd61dbbc89328600_JaffaCakes118

Files

ba8dd5eacf990e08bd61dbbc89328600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64754fd033e552af10696090de9a236e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
LockResource
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
LoadResource
GetProcAddress

user32

BeginPaint

advapi32

RegCloseKey
RegCreateKeyExW

msvcrt

_adjust_fdiv
rand
srand
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ