29b52f731e405e82feae207680768736_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29b52f731e405e82feae207680768736_JaffaCakes118
Size

111KB
MD5

29b52f731e405e82feae207680768736
SHA1

d6106f533bbfdcdf7e6464dd371abc3378e3b943
SHA256

3bb608911d42a211ae39ff4980ac09e762df6beb8c839d8e154f51997b1d652e
SHA512

f32e406d3cb3837163f8441fd0c70fbffbaaac6d264cc607278af25197e84f2129f680229ca654eec5d0c39a3d53450300c6715552df5c6b828b4325a1436fd3
SSDEEP

1536:MpV5BzANAzhrZ5A6666666666666666666666666GkBiwO:MpVbANABZ5U+lO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29b52f731e405e82feae207680768736_JaffaCakes118

Files

29b52f731e405e82feae207680768736_JaffaCakes118
.exe windows:5 windows x86 arch:x86

93ffdd124097d9f82ae7a13dc849ede9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

progman.pdb

Imports

msvcrt

_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
_c_exit

kernel32

GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dxstqxq
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fpqsluy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE