326f62f32e300443dbb470eb09c127d8_JaffaCakes118 | Triage

Sharing

General

Target

326f62f32e300443dbb470eb09c127d8_JaffaCakes118
Size

154KB
MD5

326f62f32e300443dbb470eb09c127d8
SHA1

a11d27f714ecc33939d97ce28e2f39399c0745ea
SHA256

e2afd48ace4ea7b03253ddc5cee6e47200f4f5e78f8dc7a027364921a041305b
SHA512

d041f473e953d2316b3f061026e2040f95f94d6c1d59236029f9ffc1196fc3d08042295daf09aacb5dbb30eaa53cadd2e0f1e440f4aba72f9628b478433da20f
SSDEEP

3072:XYL/596cM48adfcC/0biLyJ6BEqO0tvhv3u/k2OVgtxEG4fAXSckN80vyCT429:XYN9uFccIEXJI3x33u/k/CtxETA/kN8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326f62f32e300443dbb470eb09c127d8_JaffaCakes118

Files

326f62f32e300443dbb470eb09c127d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a20dbefa259d0096d8a3d6ec55c17061

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

ExitWindowsEx

msvcrt

strcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ