75857a9db91fc3c34217ab09adf6dea1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75857a9db91fc3c34217ab09adf6dea1_JaffaCakes118
Size

296KB
MD5

75857a9db91fc3c34217ab09adf6dea1
SHA1

958c2ce3783a35cac4b041ced5a02d593a3d2726
SHA256

a61c96b81c35b6273d12b7228797d84c09d6801e97c24396778577feecb6c51b
SHA512

7a389c8ddc6626c6dc32d97931508e2c8a29c9e140f74672947fd1d2cc15cf834c441c637674878ce96638642315a83435982dc0852e6b9adef707dd77e65ead
SSDEEP

3072:Pw8tHHRgGC8VTclFFk8jwaaHw7Koj4reSwDZr6gM/avYduCBhWRol9VudVGT3Do:ouHHRgRISYwDB6gM/8auC/WKVud83Do

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75857a9db91fc3c34217ab09adf6dea1_JaffaCakes118

Files

75857a9db91fc3c34217ab09adf6dea1_JaffaCakes118
.exe windows:65535 windows x86 arch:x86

3142f1494e12ea67757a06fcf267e06a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA

msvcrt

_initterm
__setusermatherr
__p__commode
__set_app_type
_adjust_fdiv
_except_handler3
__p__fmode

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE