b7f1a62a760505693a565ed97f11ca95_JaffaCakes118 | Triage

Sharing

General

Target

b7f1a62a760505693a565ed97f11ca95_JaffaCakes118
Size

1021KB
MD5

b7f1a62a760505693a565ed97f11ca95
SHA1

3f14d7e34eb47ad53095c17e1b4219d6d9f670cf
SHA256

877f828e0aeb2d6a38770b004f2a7f00b10dfc39c0339131eea15751de6ce2d7
SHA512

2bd09bd481eeca2df8646a097c477529ed277c1297747987adbeb1b75d5e3f3c3ce7c703ef18a08e9b390848d6b08b348cacecdd6ffef3c6ce8164db8fd9cf5f
SSDEEP

12288:i0fHjOR9BrI6+XotqPF2i6WF3UNEe9wphhI+8HUnxXMle7ve9:XH7RXoV+F3U2eWjhI+5xXMlUve9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7f1a62a760505693a565ed97f11ca95_JaffaCakes118

Files

b7f1a62a760505693a565ed97f11ca95_JaffaCakes118
.exe windows:5 windows x86 arch:x86

68513621e853e7c9491f8c57c29b474a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_controlfp
__dllonexit
_onexit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memset
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z

user32

LoadMenuA
CreateDialogParamA

kernel32

WriteProcessMemory
GetStartupInfoA
GetCommandLineA
CreateProcessA
FindResourceA
GetModuleHandleA
GetProcAddress
GetLastError
WaitForSingleObject
CreateThread
CloseHandle
VirtualAllocEx

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1006KB - Virtual size: 1005KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ