68d98b222464c208b28627041cb04062_JaffaCakes118 | Triage

Sharing

General

Target

68d98b222464c208b28627041cb04062_JaffaCakes118
Size

114KB
MD5

68d98b222464c208b28627041cb04062
SHA1

a330c5e4e628a2cf329d82badc90528404a02556
SHA256

bb304285866d6484534485e20c9dc455843a7745d0685ee6688780c78fc56e91
SHA512

038c1e95bbf524b852d02a5c32bdd46db6d6c1263bb2af587a0949c06cc4c43a15c91e2e8c10b5a46ff33a0eb14054ec8abbe6be400a18c373f3f53504f05537
SSDEEP

3072:hRHZWQgYjUJapCJhR9EoD9wZ9QX8nhhBQuQ:bZ5g4UJCOhUoZw7QufQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
68d98b222464c208b28627041cb04062_JaffaCakes118

Files

68d98b222464c208b28627041cb04062_JaffaCakes118
.exe windows:5 windows x86 arch:x86

baca703340435ab2724a9c8657f34f0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
lstrcatA
GetSystemDirectoryA
CreateFileA
WriteFile
GetProcAddress

user32

LoadCursorA
LoadIconA

gdi32

GetStockObject

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ