292a3d81bfb8b0e1f307cf94c8c4fa86_JaffaCakes118 | Triage

Sharing

General

Target

292a3d81bfb8b0e1f307cf94c8c4fa86_JaffaCakes118
Size

287KB
MD5

292a3d81bfb8b0e1f307cf94c8c4fa86
SHA1

80570e9a187e07bef611889069cfd0a9a87985cc
SHA256

2233d85d765130e38cdb98088871f9a2728665ffcd35b4965096aaf5d57cac95
SHA512

a129359b1e96f610ce25859271f6e42c4e153be3f0b2568b0a3a7350287a940ccff0769cc4f7a0faf3df56433e4835b1fecc11674a1aaa6a5fc0c3db5f6954ad
SSDEEP

6144:Z+PY/nK5ruGMUIMUFmnEBex9pngagdpQFgF6bzohPDtkscJx5E5:UwPSuzU3q4Lx/gagrF6bz+t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
292a3d81bfb8b0e1f307cf94c8c4fa86_JaffaCakes118

Files

292a3d81bfb8b0e1f307cf94c8c4fa86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3fb863511ecb4e025ef3c40c2a305caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvbvm60

ord517

Sections

.text
Size: 282KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UVVWyOi0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ