d68ec8bebe3186ce6f4f9a24a014e73a_JaffaCakes118 | Triage

Sharing

General

Target

d68ec8bebe3186ce6f4f9a24a014e73a_JaffaCakes118
Size

144KB
MD5

d68ec8bebe3186ce6f4f9a24a014e73a
SHA1

e3e2b9a8ccd8af89523666dfc9a6ec0cdcd90398
SHA256

1054d870e61e08dfdb27a15edc766fe47683aa7117e080d68d72460869df43cc
SHA512

3a5b951a29cac3630216497a30a0f4dc2b6ae046757dee2954a8c761e5b5141a457dd9df3449e578fc3582103ec0711c44d3339377d8d89305c4a3ea11f99973
SSDEEP

3072:LO/RJ7suVBkE0eXrugqMo56N6cz9FVo07bXo+CHanIIPR/:a5J7szJON1z9voUi8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d68ec8bebe3186ce6f4f9a24a014e73a_JaffaCakes118

Files

d68ec8bebe3186ce6f4f9a24a014e73a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

57cc42a2224d4c9c8da396c09dc211fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memcpy
??2@YAPAXI@Z
__set_app_type
??3@YAXPAX@Z

user32

LoadMenuA

kernel32

GetProcAddress
GetModuleHandleA
VirtualAlloc
CreateThread
WaitForSingleObject
VirtualFree
GetStartupInfoA
LoadLibraryA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ