4201013091527534978ebedae0074b39_JaffaCakes118 | Triage

Sharing

General

Target

4201013091527534978ebedae0074b39_JaffaCakes118
Size

186KB
MD5

4201013091527534978ebedae0074b39
SHA1

3f234f200f3c5ea3b9f829482e7e4b9c0e1d3b74
SHA256

2158f668a99d9a1585ffe4c93e1ce680c9a107758c6c8de7a956882f20371953
SHA512

74d82b20e4a84fbc71dba412fa29880caae8c250c9ca03253cb7b9fb7dc0125fdf69a02f91718ab283811f469bf82d2e860d2f6ca6e517ef9fe1cc581ccd1a7c
SSDEEP

3072:1EiDziLDH4+8O8uPwWERK8XbWplvJumycsi9ZayanLaqrNoSpBpaMQDT:1PuLDHi8wlRKyb0H/ycQnWkpBMMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4201013091527534978ebedae0074b39_JaffaCakes118

Files

4201013091527534978ebedae0074b39_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c49d68c0f4ffc859a0730f9d64be5ed6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateFileA
lstrcatA
GetWindowsDirectoryA
LoadLibraryW
GetModuleHandleW

Sections

.text
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.455
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ