a87158701427431899d2eb9dcbb9fea8_JaffaCakes118 | Triage

Sharing

General

Target

a87158701427431899d2eb9dcbb9fea8_JaffaCakes118
Size

25KB
MD5

a87158701427431899d2eb9dcbb9fea8
SHA1

ce344cde9a9121e3e0310ba48175472308ee02e4
SHA256

25b3d50ccef0202b88d7eb8bae8c1a6d2224bfcd08aada0ca8237755b7223732
SHA512

d1c57d7805af86bf9de29bb89f7ab67580d026f6bb9b432f4cb7e46f908280e477b5b66e71f810ff7dd933343837cdd7598c2ea2c4a19c40f449359f037de642
SSDEEP

384:HdnK3gaGUte/+w0RA0ZbwNL+uRSdkOBBDF7+tXea6QbdjsTQw/s6jkTKRru:HdnsgzccR+IOjueOjCtkaru

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a87158701427431899d2eb9dcbb9fea8_JaffaCakes118

Files

a87158701427431899d2eb9dcbb9fea8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a8ae7489c8e18bd61313a47d51b9082

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
BackupRead
Beep
AddConsoleAliasA
AllocConsole
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__setusermatherr

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 699B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ