2906791530cd4586fd559568cb110931_JaffaCakes118 | Triage

Sharing

General

Target

2906791530cd4586fd559568cb110931_JaffaCakes118
Size

120KB
MD5

2906791530cd4586fd559568cb110931
SHA1

306e6674a9b5a4c98fb8f080184368868ee0c684
SHA256

fce66b73f26a2897d334284a4acb923fd8c863e05c85af5e9d145ff3892569d4
SHA512

789dd8f5bad88718436f4149d5f64e69a01ba685bd8c9a4840a41d908e432aa044b2f86a7dc7b15b1b4d064fa9c6107d4f68bfb34c67dbe753d951d3d6076c7b
SSDEEP

3072:/s0hyD32GzfGlYNuqFYacXNAFeiapgKjOXs+0:EGwIskdmeLpYsH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2906791530cd4586fd559568cb110931_JaffaCakes118

Files

2906791530cd4586fd559568cb110931_JaffaCakes118
.exe windows:1 windows x86 arch:x86

d9a82ee53f587e56a32cf383c032f5e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsA
ExitProcess
FindResourceA
GetProcAddress
IsDebuggerPresent
LoadLibraryA
LoadResource
LockResource
SizeofResource
UnmapViewOfFile
VirtualAlloc
VirtualFree

advapi32

CryptAcquireContextA
CryptCreateHash
CryptDecrypt
CryptDeriveKey
CryptHashData

Sections

.idata
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.main
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ