5d4a7c8b70a871f746e57e046cb67c11_JaffaCakes118 | Triage

Sharing

General

Target

5d4a7c8b70a871f746e57e046cb67c11_JaffaCakes118
Size

157KB
MD5

5d4a7c8b70a871f746e57e046cb67c11
SHA1

4acd930280e93f3dbbef36c1d293657377fd5f4b
SHA256

06f8dad6922e9d360ba0411d1c9855d2910cb332360b6a2d1696d3ba688a87c4
SHA512

a81b5415b7b9941a3568ed2f220c59c81cd486887b542c3cd77c3124dd45a09dfd2529a70332a7b1787139b5324372568e4013440bdd9f88fe921456614c387a
SSDEEP

3072:fbOCIxExnFwM9JpIksE4aA9Vb2XDCI0g37iAdrZBbDuT4UfMu:fN7nPXv4f/b2XDbWYDeT4UfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d4a7c8b70a871f746e57e046cb67c11_JaffaCakes118

Files

5d4a7c8b70a871f746e57e046cb67c11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb6078f930ca2d2a41db3068ba02ca5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ