d5da53269201d31a057466817722e473_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5da53269201d31a057466817722e473_JaffaCakes118
Size

8.2MB
MD5

d5da53269201d31a057466817722e473
SHA1

9486cbfe3807e55dc5698747c7322c7d7ede616d
SHA256

7ea4d81a2bff8f3298c614e844ad45975aff32a06c4914c908ff1e3079ce401b
SHA512

2fa0f328a58e63554aac940325ba2a8e411f932f43ce0eebf84d87be38b92bd9534759f9fbf5c1104b790007bf3743edfc960e134f8cfba41edcc7a5c8e54a89
SSDEEP

3072:fUBSwylBWvQKxALAHJvq+YMtO77zxLAXFsQYcD01rrfj:fUgwaBWvNpS+s7tLlQYO0t7j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5da53269201d31a057466817722e473_JaffaCakes118

Files

d5da53269201d31a057466817722e473_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e76489e5e8fb04e575fc22708aea5bc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 836B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ