391e9af89b3f3a91d55d9c66298e23db_JaffaCakes118 | Triage

Sharing

General

Target

391e9af89b3f3a91d55d9c66298e23db_JaffaCakes118
Size

1.4MB
MD5

391e9af89b3f3a91d55d9c66298e23db
SHA1

f77f079745579a2ba03e2a2014fd4b451881560e
SHA256

a84032876abe30fd562a512537bc838ac86784d96a61a408702ec4421c279216
SHA512

7319052d46abc2150993520383ba0bd540291035bed23c7f506dcbb13986a8e3510d9f72d737e52dd883debdc38437ded13f3ae55408d14f8d3de27d6388885c
SSDEEP

24576:M12teRaAIB4yoPeLFoghLW7FJsOk+ssm+5gYauMFSDDfrqXdWumZ/EGvVwktxdH7:02t2aAzyoPeRoghQJtL5GHonfrEWumZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
391e9af89b3f3a91d55d9c66298e23db_JaffaCakes118

Files

391e9af89b3f3a91d55d9c66298e23db_JaffaCakes118
.exe windows:5 windows x86 arch:x86

99e1dae1d3db75ce5e4af9769bb52a7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32 kernel32

GetClassNameA �b

Sections

.text
Size: 703KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.abb
Size: 734KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.abb
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.abb
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.abb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ