95127bfe2ea8b883b2694662972eba32_JaffaCakes118 | Triage

Sharing

General

Target

95127bfe2ea8b883b2694662972eba32_JaffaCakes118
Size

108KB
MD5

95127bfe2ea8b883b2694662972eba32
SHA1

8af5f5dab0cf1e447431f2fb27c6cfc23ac2f760
SHA256

00873e3363a04b26f5fcbabde5d40b1a0f020033b3773e80637348d3278242fe
SHA512

e0d27bb49c7351b96f661b7879b8b1da8c09571bfc55196d3eace0c368cfa4b99422257df13f2da30b03d287a5ae51e09239fdc0abae379c0d758d6b91ee14c9
SSDEEP

3072:eG/VKTIQRbClDtT+Ab10EYl1ITcxPPsCip2:h5QRGlDtTnbbYzTcCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95127bfe2ea8b883b2694662972eba32_JaffaCakes118

Files

95127bfe2ea8b883b2694662972eba32_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9a96c8cf53d5d98e36cfd008ce796efd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
TlsAlloc
GetVersionExA
GetSystemTime
VirtualAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
GetLastError
GetStartupInfoA

secur32

GetUserNameExW

msvcrt

_XcptFilter
_exit
_c_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
_cexit

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ