08aaa4cf4d9a93b70dcfd961f9aeac3e_JaffaCakes118 | Triage

Sharing

General

Target

08aaa4cf4d9a93b70dcfd961f9aeac3e_JaffaCakes118
Size

111KB
MD5

08aaa4cf4d9a93b70dcfd961f9aeac3e
SHA1

bc45249519de50124c3c434e2012d460798ec069
SHA256

0aa6463d17740abe25187ee56a3870cfd73a0daca26c99d7d08cccc7f1646e76
SHA512

21c4565d78885ea0ac12670652eeeffc1fd0934777ede930127eb3c534219fb7fb359e80772722d3640ab33f102822383511cd0037d130a39cd674d661b815f0
SSDEEP

3072:R7iDXKf4pdj/way0edZGQ0OmZMuo8FEN1AqC16a:BiDKkdj/wYyM8Ki8A+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08aaa4cf4d9a93b70dcfd961f9aeac3e_JaffaCakes118

Files

08aaa4cf4d9a93b70dcfd961f9aeac3e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

90d8182154873325ea37dfbb433865b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetProcessVersion
GetStdHandle
GetTickCount
IsDebuggerPresent
GetProcessIoCounters
GetCurrentProcess
GetProcessPriorityBoost
GetCommandLineW
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetStartupInfoW

shlwapi

PathGetArgsW

msi

ord194

msvcrt

_adjust_fdiv
_onexit
__dllonexit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ