6984f4bbea2c41094a225b7d2e1ff39b_JaffaCakes118 | Triage

Sharing

General

Target

6984f4bbea2c41094a225b7d2e1ff39b_JaffaCakes118
Size

8KB
MD5

6984f4bbea2c41094a225b7d2e1ff39b
SHA1

f0f515600b601befda1b11961162ceb59b021bf7
SHA256

9684331d7ea3e06d4eb13dbbc487496b984be37954016a23f10045bd61340797
SHA512

7278e1e73fc16d097b89fbfa574cb6e7fb340d9f2324d64c117281ce959cb510c6b2b1c54458211d75604bf13427910d1f8c12c5ecde135def6a7bf60fd559ad
SSDEEP

192:6uRP6Gm1v8t3B8j+k3puTWc2ynMgsPSOWa+sWU:FJ3uv6apiWunMSOWa+sWU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6984f4bbea2c41094a225b7d2e1ff39b_JaffaCakes118

Files

6984f4bbea2c41094a225b7d2e1ff39b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8fda77d866599aff5a5470062372ee3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
__setusermatherr
_controlfp
_except_handler3
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_CxxThrowException
malloc
free
_wcsicmp
__CxxFrameHandler
wcslen
??1type_info@@UAE@XZ
wprintf

kernel32

GetFullPathNameW
GetLastError
GetModuleHandleA
FormatMessageW
GetCurrentDirectoryW

ole32

CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoInitializeEx

oleaut32

VariantClear
SysAllocString

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE