a63c91389f4b5dec001ebd6959a93dad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a63c91389f4b5dec001ebd6959a93dad_JaffaCakes118
Size

113KB
MD5

a63c91389f4b5dec001ebd6959a93dad
SHA1

10ae25c214d29117f5cb779880c0f6a320830bdb
SHA256

d71d4230b6019a2ef1c9fd3716d743ee8717e3cbd63383e77924e1e6eb847a66
SHA512

40775a6d0ea111985e935b0c2a2535c2c05a53883e7defea7a65946941a4f70b7d02b8526f3bf18664c35d970213245cda93526b44ad4ba327200295cb1dc209
SSDEEP

3072:bbe1zJ2IA22jmiV/0HQj9zsJS2yd+viMkE4lqAme:e9EU2dV/0HQxsJzmCm5ue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a63c91389f4b5dec001ebd6959a93dad_JaffaCakes118

Files

a63c91389f4b5dec001ebd6959a93dad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

343c4d2602ad34b49964df659354605f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
CreateSemaphoreA
GetStdHandle
CreateEventA
GetVersionExA
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetStartupInfoW

msi

ord85

scarddlg

ord2

msvcrt

_adjust_fdiv
_onexit
_exit
_XcptFilter
__dllonexit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ