077df10b64e308b2d5d07bed7807dcc3_JaffaCakes118 | Triage

Sharing

General

Target

077df10b64e308b2d5d07bed7807dcc3_JaffaCakes118
Size

15KB
MD5

077df10b64e308b2d5d07bed7807dcc3
SHA1

ceca7b85bab076539d1faa441352ca1cd2346a62
SHA256

af884219ab2c7ed0ecb53e91bb735cd061bb2c9f7d142e8f8af24f4da3f4d48e
SHA512

5f821a2c68b813c52fe15222c72a59345d0227139aa9c22d2044fbaaa7fdfc6b869c8729d913aed94e4d3c09bdc2cec706eb0b263cff835e5e268bf04bbc3ae1
SSDEEP

384:GluvnzTWy5W9Q/iQKd6G1nxggW2aICKvIoe3/W0xbA:cu/9ZiQKdRVxgg7CWIH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077df10b64e308b2d5d07bed7807dcc3_JaffaCakes118

Files

077df10b64e308b2d5d07bed7807dcc3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1a645bf2facde712ba7d22b108a62f49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
_exit
__p___initenv
_except_handler3
_controlfp
exit
_XcptFilter
__p__fmode
__set_app_type

advapi32

NotifyBootConfigStatus

kernel32

GetLastError

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE