acabbce43ee827d1adfda55f798e05d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acabbce43ee827d1adfda55f798e05d8_JaffaCakes118
Size

39KB
MD5

acabbce43ee827d1adfda55f798e05d8
SHA1

84ce19d58b295b8314d07061c4e893a1f233b0a8
SHA256

5b060c5cadbb6144ad5c477121574253df15c29baa0bdc8372bc9e2a715995f2
SHA512

87518ee17c4adbc91587cd9ea63dbc670f75d30accec8ea37055b91573d011725d190eb92964d96569cf6e42316954029afd3a3a930ebc07ffe20ad8ba8f95ff
SSDEEP

768:lSGrSn9+3rKUzB6YVYjjbRY5aiQu+oLEnA72M2ITU8bykL9Oexn:l1H7KUl6yfUiz+oHaIU8me8Wn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acabbce43ee827d1adfda55f798e05d8_JaffaCakes118

Files

acabbce43ee827d1adfda55f798e05d8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cc944621a195fd2de9db451d82177d36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetEnvironmentStringsW
GetEnvironmentStrings
CreateMutexA
GetTickCount
GetCommandLineA
GetCommandLineW
CreateEventA
IsDebuggerPresent
GetPriorityClass
GetCurrentThread
GetStdHandle
GetVersionExA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW

shell32

SHQueryRecycleBinA

rtm

RtmFindNextHop

msvcrt

__p__commode
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__dllonexit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ