759e64c1aca55465c111a7aea161ddf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

759e64c1aca55465c111a7aea161ddf9_JaffaCakes118
Size

308KB
MD5

759e64c1aca55465c111a7aea161ddf9
SHA1

6af19ec3a9aef046ff723bdd14df1329b605d1fc
SHA256

92b97ba4cad3734812b2d567894cca01daf08c6cbdf238c3467a86f4c32ecd74
SHA512

a98946384f8e268ca9c40ff377bdc9f1f7ccb8c911afc59a96563bf72d4b173d299db3571f989124150e1fcc3e261f1af0983c6bfe03ecb5c3cee10ba5ae95ab
SSDEEP

6144:81GqznXJuwXZJrerSRGyqYiZsdTB8BTZ84HWs:8HnXMYiZKTKws

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759e64c1aca55465c111a7aea161ddf9_JaffaCakes118

Files

759e64c1aca55465c111a7aea161ddf9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0d4d888365525da27840d92b16e9939

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_controlfp
_except_handler3
exit
_XcptFilter
_cexit
_exit
__p__fmode
_c_exit

kernel32

GetModuleHandleA
GetStartupInfoA

hypertrm

MessageLoop
InitInstance

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ