09881755798826b85d52a74410797f86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09881755798826b85d52a74410797f86_JaffaCakes118
Size

40KB
MD5

09881755798826b85d52a74410797f86
SHA1

bb556bbc20be1e7ee5418ffbf42cd5c9ea94b87c
SHA256

3d53a98118280252cb205d4d3e783f90ab0bee23f1f6a8d865b9b617715da714
SHA512

37a737d47aa648633cf8ed840c1658bcd9cf95fe7e7675b68672e2aa494f73855d4a29fdc71c30dd175bbbbcb0ecc18c46aac4eefa2838ba223dd4457185ef9b
SSDEEP

768:F1iGP7mHYvV+/6QcxRjVoGEaMpVIpRyLRpcESHrncMC:bPK4vE/5EJyG2VIHytpwcMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09881755798826b85d52a74410797f86_JaffaCakes118

Files

09881755798826b85d52a74410797f86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04fb1a68d0d401ab7e41c36d2f1b291e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
HeapAlloc
GetPriorityClass
ConvertDefaultLocale
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

msvcrt

__p__commode
_exit
_XcptFilter
exit
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__getmainargs
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 710B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ