8319605f9c49e058a7eca47f65848c47_JaffaCakes118 | Triage

Sharing

General

Target

8319605f9c49e058a7eca47f65848c47_JaffaCakes118
Size

115KB
MD5

8319605f9c49e058a7eca47f65848c47
SHA1

5405b8e180f91bb13504b753fbd4bae883eb66b3
SHA256

50dc490f0dd9466fc8733bb6934f73305e3200a75a857d6c660c662ea8d17070
SHA512

8438c3172e50570eec7c6171fcf835c089f0a3ec265077e0ceaa11af374803130a2aeb908b11fe203a42a4d1a5bca19e9be731cadcf92cf2332e2e2c0f7cdeb6
SSDEEP

3072:1V1DcfFQ2/osc7RhCjPqLQVtTZMcesfOoNSflxAxJHlDoe:1VqloscdhCzq0Vcl6OaSflxCJFUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8319605f9c49e058a7eca47f65848c47_JaffaCakes118

Files

8319605f9c49e058a7eca47f65848c47_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8f758aee116e095a841ea3c0d3270928

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetProcessVersion
GetCommandLineA
GetCommandLineW
IsDebuggerPresent
GetTickCount
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA

user32

LoadIconA
LoadCursorFromFileA
GetWindowDC
SetWindowTextA
ReleaseDC
LoadCursorA

msi

ord130

msvcrt

_initterm
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
_XcptFilter
exit
_acmdln
__getmainargs
_exit
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ