86753aacf1b89e9549c6fb923ce6b7ef_JaffaCakes118 | Triage

Sharing

General

Target

86753aacf1b89e9549c6fb923ce6b7ef_JaffaCakes118
Size

34KB
MD5

86753aacf1b89e9549c6fb923ce6b7ef
SHA1

1fbc0bef8335c3554f9aa1a8003ba3e5af996b6d
SHA256

a145c06433ff2740e962a0e8fa6c2bb14078d44abe4cb507e6a4ed4e994b2ac1
SHA512

5c6b85b6ad81ceb124fc31e78e6e52103ce00e80955e29dced8f2a85124bfe05ea5a3b611656b5b01d3017cb8502de92e6af13ecbb765fad95c92fd652d246aa
SSDEEP

768:xvU+7KrmXcsSpqfAR1OVfuMcp71Axg1tvn:e+7u8cs0q28wME71wg1tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86753aacf1b89e9549c6fb923ce6b7ef_JaffaCakes118

Files

86753aacf1b89e9549c6fb923ce6b7ef_JaffaCakes118
.exe windows:6 windows x86 arch:x86

66f71647ade5aa68ffe17c027ff49e02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

plasrv.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
GetSystemDirectoryW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter

msvcrt

?terminate@@YAXXZ
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_vsnwprintf
_except_handler4_common

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE