94a0d4360aefc0cdc3996483f2fa2d06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94a0d4360aefc0cdc3996483f2fa2d06_JaffaCakes118
Size

95KB
MD5

94a0d4360aefc0cdc3996483f2fa2d06
SHA1

2da4936cef2d02bc75d2960fa96dac71848eb698
SHA256

3e857adcae41fc9da3dcd308aa8d4e4b728b956d590562072da9cc2b13b0e680
SHA512

98919a5b30780d22a3c5c8e9a4a4cc055a593f0b6c7d54072dd74ad960ab9d63998fd935ae9da0296953dd22f3e1be7997d053525ab580f55e5150a75068cad8
SSDEEP

1536:afFkWGq6cjTAD1ORq07ZhBugie/02+wkAvvTfy+gudAHziK4i/BhkhLrnr:adkWGqzjTAg4AZhBuFeo0nTZgaCnyhLX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94a0d4360aefc0cdc3996483f2fa2d06_JaffaCakes118

Files

94a0d4360aefc0cdc3996483f2fa2d06_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f0d4d888365525da27840d92b16e9939

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_controlfp
_except_handler3
exit
_XcptFilter
_cexit
_exit
__p__fmode
_c_exit

kernel32

GetModuleHandleA
GetStartupInfoA

hypertrm

MessageLoop
InitInstance

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE