b683aaa1281e7678a1c0817edf31db5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b683aaa1281e7678a1c0817edf31db5e_JaffaCakes118
Size

108KB
MD5

b683aaa1281e7678a1c0817edf31db5e
SHA1

7b6df5cb6821e39857a6482c0528c585eeed4500
SHA256

c89e0df8abcde09ac0a3ae8e8f68aac03dc2f0d16318438ac2ea81bc27ef5118
SHA512

3df3e36eebd7dfb4e5814057e9936717f3b102f11f91e2155c6f226ad1e2481c4a07f5f01d245ddd68b09c7e596e109698e93901814493a29e5849bcb7df2af3
SSDEEP

1536:nUUn5MBDP5Qzv5mIw7IZpl15AWaFXbokmcF3IJZ14csZfrgroFP+OkqfxtMSyNcS:nUXDP5QE5HxYclHZTgE+Oxxvyaa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b683aaa1281e7678a1c0817edf31db5e_JaffaCakes118

Files

b683aaa1281e7678a1c0817edf31db5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbd25d71eccefd91099134d99fde4b13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetLastError
LocalAlloc
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE