7445dbc8248af66a07a5f4204c067426_JaffaCakes118 | Triage

Sharing

General

Target

7445dbc8248af66a07a5f4204c067426_JaffaCakes118
Size

113KB
MD5

7445dbc8248af66a07a5f4204c067426
SHA1

9ed4880e919ce9bebb82e54f7c85219bdf58d654
SHA256

8c44e6709cbb943f2f92fa84549d4d687bc7122a9414a43ce388f6a253a91dbb
SHA512

d8e6a9266e80901fafc0484b34fa4638c839980c4480b252afa8e8290428516866ae6caae9cfb0579dd24bbbc1c5fe18dd07e87eaddf6c827c6d7105de273784
SSDEEP

1536:pHnskWqAll91i+tkpSL17+5iLqLd6pjmgux2ECRZi/l+MIh2nKfCITR:pHo3l91XkpSL17CglpC+Eft+MIhYK64

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7445dbc8248af66a07a5f4204c067426_JaffaCakes118

Files

7445dbc8248af66a07a5f4204c067426_JaffaCakes118
.exe windows:5 windows x86 arch:x86

40a0d323e6f5e1a37f3d72ed2020b529

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetEnvironmentStrings
CreateEventA
GetCurrentProcessId
GetPriorityClass
GetCurrentThread
CreateMutexA
GetCommandLineW
GetVersionExA
GetEnvironmentStringsW
GetTickCount
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetCommandLineA
GetStdHandle
GetStartupInfoW
GetModuleHandleW

crypt32

CryptMsgClose

rtm

RtmFindNextHop

msvcrt

_except_handler3
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ