d00731ad16aa79e739f8710cbb6e2b89_JaffaCakes118 | Triage

Sharing

General

Target

d00731ad16aa79e739f8710cbb6e2b89_JaffaCakes118
Size

71KB
MD5

d00731ad16aa79e739f8710cbb6e2b89
SHA1

833627d8c98e2f73ed63b58237063957e0fe5906
SHA256

1680008d7aff03fb1662a45b28867d9692d7f897014fc8e409d73e0c4be48e60
SHA512

1ad55f5032d160b4945d6d652697ca4b8d995b3cd3b3a4f15e623928183391122969d03d147c938f26b53541e2c5b8b087d40cf71fc7e05f2b56424626fc83c5
SSDEEP

1536:HA/jE059fkPeqirDdvXj5YdDmjbNsulZ4B:mlvqiPdv1YtmfN/lZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d00731ad16aa79e739f8710cbb6e2b89_JaffaCakes118

Files

d00731ad16aa79e739f8710cbb6e2b89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b027ab97db6db591d4dad1725c938c0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

__p__fmode
__set_app_type
__p__commode
__dllonexit
_onexit
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_CRT_RTC_INIT
_except_handler3
strlen

kernel32

GetProcessHeap
HeapFree
GetCurrentProcess
HeapAlloc
CloseHandle
GetModuleFileNameA
DebugBreak
GetVersionExA
RaiseException
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GlobalAlloc
FreeLibrary

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ