bda4825f2cdd1ce0690ee0ba3d081266_JaffaCakes118 | Triage

Sharing

General

Target

bda4825f2cdd1ce0690ee0ba3d081266_JaffaCakes118
Size

111KB
MD5

bda4825f2cdd1ce0690ee0ba3d081266
SHA1

460c1d178dada1d447aa85960cc10a03941c88e8
SHA256

2c25ce96d0ff48e04f78feba934e1827fd1ef390119958b010042ec73ca5bddd
SHA512

417c2816963571c4416531eaaf3798ee876ded98cc4c93d02d592b2f681cbd32b4b5bb87ab6804199b28538b25c5fb12e7e9e62be231d9c1e67d5c4f7ddceaf5
SSDEEP

3072:lnFZVmopj8APNU5TzFbCNZ13ACRreSjROro6EV71/:FFHmop4gU5VCZ1tC2EzS1/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda4825f2cdd1ce0690ee0ba3d081266_JaffaCakes118

Files

bda4825f2cdd1ce0690ee0ba3d081266_JaffaCakes118
.exe windows:5 windows x86 arch:x86

abe4cad6d7cf76d8be9eb728b64f93bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCommandLineW
GetCommandLineA
GetVersionExA
GetProcessVersion
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA

shlwapi

PathGetCharTypeA

msi

ord141

msvcrt

__p__commode
_exit
_XcptFilter
_onexit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ