c94c4311ef85437d3cc64ce74a5405dc_JaffaCakes118 | Triage

Sharing

General

Target

c94c4311ef85437d3cc64ce74a5405dc_JaffaCakes118
Size

465KB
MD5

c94c4311ef85437d3cc64ce74a5405dc
SHA1

e08a038b9120773afd1c9ca288910d7a6bed23ea
SHA256

5ada05565851355cbbab41744d2f505dc4686f5f45dcef43ec5efc9b5d8301f0
SHA512

a479192f1afb2f1008071645b63d246dab107ca9d0eb94ddf77d0b1be04e176e4fbc9ab86133a12744516acd12ff20b9e793174fac09096281f928b6bed486d0
SSDEEP

6144:WJZyGjiDNiUc0UYYdSnwn/4DYqTw8Np453vcOFt7xjIj9BlRqGojtGGGYM7GfWLX:eZyGUZc0UEwQTM8Np43ejVRqGQGr3Wna

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c94c4311ef85437d3cc64ce74a5405dc_JaffaCakes118

Files

c94c4311ef85437d3cc64ce74a5405dc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59ebb6b247b46206d987e2a06bad01a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_except_handler3
__dllonexit
__set_app_type
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
_onexit
_c_exit

kernel32

OpenMutexA
CreateMutexA
GetModuleFileNameA
GetTickCount
Sleep
FindResourceA
SizeofResource
LoadResource
LockResource
GetModuleHandleA
GetProcAddress
GetStartupInfoA

advapi32

GetUserNameA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ