a7b3d4f64fa87e8f7ce33d46037ac1c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7b3d4f64fa87e8f7ce33d46037ac1c3_JaffaCakes118
Size

97KB
MD5

a7b3d4f64fa87e8f7ce33d46037ac1c3
SHA1

43e1dff258561aa9acba9839bf736a10668128bb
SHA256

695503b438bd07abe9379615078c211c98796479f4f3af1d2d47914adcdd484d
SHA512

8e0ba0211dd8347c502cfb3404ae85d036db3823002053416eb0da038c641c84589ce4ea42539ce154d3612532704d06ada799facc6061479a2401f5a93adef6
SSDEEP

3072:O9RsVyBGdjLR8rNuRGQ+Cr+2NIcK91DRRkJSzoI5:/VwGdj18rxQ+Cr+2ucC93kJ0o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7b3d4f64fa87e8f7ce33d46037ac1c3_JaffaCakes118

Files

a7b3d4f64fa87e8f7ce33d46037ac1c3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6876da6520ad5b769e212fecce96a24a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetStartupInfoA
VirtualAlloc
EnumResourceTypesA
ExitProcess
GetModuleHandleA
LockResource

msvcrt

_beep
_c_exit
_chdir
_atoldbl
_assert
_access
_cgets
_cabs
_atoi64
_chgsign
_cgetws

oleaut32

VariantClear
CreateStdDispatch
VariantInit
VariantChangeType
SafeArrayAccessData
RegisterActiveObject

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ