a30374618d88493d06fa82db3a105a61_JaffaCakes118 | Triage

Sharing

General

Target

a30374618d88493d06fa82db3a105a61_JaffaCakes118
Size

72KB
MD5

a30374618d88493d06fa82db3a105a61
SHA1

7a85d63f748e7e0b0f6c12b7665496d9e39f8a36
SHA256

d6bceb7e8fc2016a2a52a77be830f3c5274a1d6d110552f7eea012d4629470ab
SHA512

393e6d5ee853e00f0662cf0953e64e456b502bc76b198a032a4088c06a3f7f92804811880334e464abe644a549e2f2ad1115934d11c0efc8bf0e5898969e4310
SSDEEP

1536:C1HH/TGAqe7xRv4pc6f0hlHfayRgfti9RxY/tMt:C1naAr7jwpc62lHfa1tiNYmt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a30374618d88493d06fa82db3a105a61_JaffaCakes118

Files

a30374618d88493d06fa82db3a105a61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c363ca3b499130fbe536c85069110418

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapAlloc
GetModuleHandleA
TlsGetValue

user32

ShowCursor
LoadCursorFromFileA
ScreenToClient

gdi32

CancelDC
CombineTransform
SetDIBits

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zynmjvx
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE