94599dc1909c9673eb300812bbb7646d_JaffaCakes118 | Triage

Sharing

General

Target

94599dc1909c9673eb300812bbb7646d_JaffaCakes118
Size

4KB
MD5

94599dc1909c9673eb300812bbb7646d
SHA1

69d4383ae600041cc3be63b3f5ed2f2906f0aeff
SHA256

17e6cb9ff89ff7dd34b887e246903e1fe6b755940015e28da64bd18eb4f47601
SHA512

f1a3106435c9c0a6e40fced3b07f048f7d44d75c80b51a7202992deff21a7531d7f5529cfc17f3d56b7ac93a697dcf0e3ce84014988fb87ffb27ca70ed10ca6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94599dc1909c9673eb300812bbb7646d_JaffaCakes118

Files

94599dc1909c9673eb300812bbb7646d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81c96ecece80e823d8c3619386e0bca7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_initterm

Sections

.text
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ