aa2b241f96c8323289289e3af0daaff4_JaffaCakes118 | Triage

Sharing

General

Target

aa2b241f96c8323289289e3af0daaff4_JaffaCakes118
Size

917KB
MD5

aa2b241f96c8323289289e3af0daaff4
SHA1

0bafbce79f4ae12f83b18fc887640fc55498d798
SHA256

27517e8eb4bdf5c343cc06ee9935f20a23c851ae3c426aa4efbe342ce2d50412
SHA512

a94b82090f1ddb206bcf36f28a86eebd5ca7fd6a535cea8d683dff29fedf3f68a40c77d5b3662114ec09e7ebf4937ad4ab0eab550521bc0456e947038a69c35a
SSDEEP

12288:YWZ+uXbIwAhbWUV6gLLke4srUOcjoTPhx3TOW6Q0DkZUoxRCg0dQfLV5iggXhdVD:YWZIwAF1rLLNvBHEW6H80Qf7bg9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2b241f96c8323289289e3af0daaff4_JaffaCakes118

Files

aa2b241f96c8323289289e3af0daaff4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

587fd4c09f7a0b63055c5e8d03145f42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
lstrlenA
CreateEventA
CreateMutexA
GetVersionExA
VirtualAlloc
CreateSemaphoreA
GetStdHandle
GetModuleHandleA
GetStartupInfoA

shell32

SHParseDisplayName

winscard

SCardFreeMemory

msvcrt

_adjust_fdiv
_onexit
_except_handler3
_exit
__dllonexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 442KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 443KB - Virtual size: 443KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ