76d15e6c5555c98863e00e825516e08d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76d15e6c5555c98863e00e825516e08d_JaffaCakes118
Size

34KB
MD5

76d15e6c5555c98863e00e825516e08d
SHA1

098a853ced83520cf0fd091bd2285ba9df59abe4
SHA256

c2871e305960020e641a3bc3e6b6a723d81dae65b0fc22e0fbfb0e0d0a9a78fb
SHA512

f04265d854293c492e91818ead4ff7f817543b5e4926fbb21bd07053fbe1da4f91078838358fe44afb1acf53e1549d6ab6f0b74df4e03bd444153e7fcca5f4fa
SSDEEP

384:PDsI3eCtyTzD/5lo6KSnDL4hOaEfxBWoOzObxZLQkV2sRKVrf:P4IMCS34oBx4oq0dQhsRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76d15e6c5555c98863e00e825516e08d_JaffaCakes118

Files

76d15e6c5555c98863e00e825516e08d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cc161fc8136594f8d179b2c42f242303

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
_XcptFilter
exit
_c_exit
_acmdln
__getmainargs
_except_handler3
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_exit
__CxxFrameHandler
_setmbcp

kernel32

GlobalUnlock
GlobalAlloc
GetModuleHandleA
GetStartupInfoA
GlobalLock

user32

AppendMenuA
GetForegroundWindow
EmptyClipboard
SetClipboardData
CloseClipboard
GetSystemMetrics
LoadIconA
EnableWindow
OpenClipboard
GetParent
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
DrawIcon

ole32

CoCreateGuid
CoInitialize
CoUninitialize

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RLPack
Size: 14KB - Virtual size: 71KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ