148a8cd865b54241d583f26b48bb9552_JaffaCakes118 | Triage

Sharing

General

Target

148a8cd865b54241d583f26b48bb9552_JaffaCakes118
Size

32KB
MD5

148a8cd865b54241d583f26b48bb9552
SHA1

5d531a3078d4e04171707786c02599169ab28f20
SHA256

39d805139a7ebf2895530ec68e9ca26b5990977f9e385a168ba0c97de39e8c13
SHA512

39fc33a0a117a3fc97c57f83f4de5018c7b73e52a7a574a9f58e0af81c200a39c76c962e5bee63c1f5165b29d155d37938d1af6a32582d55121470ac1a975246
SSDEEP

768:CAOmZDPYEQxiO0srYc3Esedh/SPyNGfXsa:CoZDPo30IYc3EsYYXsa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
148a8cd865b54241d583f26b48bb9552_JaffaCakes118

Files

148a8cd865b54241d583f26b48bb9552_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ce9edb5fa742ba6e3de62b6f3f0a5fb3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetComputerNameA
GetFileSize
HeapAlloc
HeapFree
VirtualFree
GetProcessHeap
Sleep
HeapDestroy
HeapCreate
ReadFile
GetModuleFileNameW
CreateFileW
VirtualAlloc
CloseHandle
FreeLibrary
WaitForSingleObject
IsBadReadPtr
GetLastError
LoadLibraryA
VirtualProtect
CreateThread
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
_stricmp
free
strchr
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memset
memcpy

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ