0259dac34e4108c6bc0e0e65e14315b7_JaffaCakes118 | Triage

Sharing

General

Target

0259dac34e4108c6bc0e0e65e14315b7_JaffaCakes118
Size

82KB
MD5

0259dac34e4108c6bc0e0e65e14315b7
SHA1

d74b8f4855c5dbe86c4bd5947a858677bb01802f
SHA256

489bcd1d50eda851ce2391b8763bd8e0d18c24b317ab0c0350dcd909acbaa44e
SHA512

9757d4692079f471c94eb9ef0ea60a6a7ff42fd9f0949df7accac99f2cfec77eb43c785aaf2593e907ceedd8efe66bd821744578ed68cd599f4a059bd9df2424
SSDEEP

1536:wO7OEqm53YJWuVr/GhFL0phVUGDZPX3BQ1jfzdlsvB9N8FFiYMV93n4NOF:TqEqm5fi/GPAhhZfy9fEJIH034i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0259dac34e4108c6bc0e0e65e14315b7_JaffaCakes118

Files

0259dac34e4108c6bc0e0e65e14315b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba5fef21e5215a6aaf5aa8093a90522b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LockResource
SizeofResource
GetModuleFileNameA
FindResourceA
CreateMutexA
OpenMutexA
LoadResource
GetModuleHandleA
GetStartupInfoA

advapi32

GetUserNameA

msvcrt

_exit
_except_handler3
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_XcptFilter

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ