a09bdbd9b10333092a831ccb78649739_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a09bdbd9b10333092a831ccb78649739_JaffaCakes118
Size

29KB
MD5

a09bdbd9b10333092a831ccb78649739
SHA1

c6a2fe5854d9781d332d8acc746f40d85ae2b5c5
SHA256

1f89182f970cb0d5f854d68bc793267319803ab7b0524f0b46b7db4a41c7ce86
SHA512

faa8aa627e0a5f3342a38f355529d946dfa2f7bcb5a8d5de8350e0feb6871bc7f12bb0e616eb0f39eee9d26cf24b73783cba64f606b4ce4a48cb0cf6fff7ba97
SSDEEP

768:IYqlAb/+z28W4s+txMqIm8ugv05UCKDKR1:I96b/HpUi22vGUJ21

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a09bdbd9b10333092a831ccb78649739_JaffaCakes118

Files

a09bdbd9b10333092a831ccb78649739_JaffaCakes118
.exe windows:5 windows x86 arch:x86

7c05bb32120e165992cb8884e4ef378a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
GlobalUnWire
GetModuleHandleA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
memset
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
__setusermatherr

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 671B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ