d9c0910594e3a95b079dacf91113d03b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9c0910594e3a95b079dacf91113d03b_JaffaCakes118
Size

24KB
MD5

d9c0910594e3a95b079dacf91113d03b
SHA1

bc632699cdb2df7f61a383567345476a9bd2efa6
SHA256

820f26625454a0f1102e97e013ddf1a3d6e25ff3b106f27f915c9a3f9bca9e28
SHA512

80f8741d15572523121544a007f9184789ca719a7e953e651b43f69140045ebed51c128008bfbb00a175edfe6e615dd317d10c17e5c06cd2d8b762437c63a81b
SSDEEP

384:29XkYZEudu1R8QOrM6jDFSj+InymANl+dO1:29rDWRc46j5k1jde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9c0910594e3a95b079dacf91113d03b_JaffaCakes118

Files

d9c0910594e3a95b079dacf91113d03b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d90c300d2cb9218de46b97a380cdd9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord464
ord466

msvcrt

_initterm
__setusermatherr
__getmainargs
_mbscmp
_acmdln
__p__fmode
__set_app_type
exit
_except_handler3
_XcptFilter
_exit
_splitpath
_makepath
_adjust_fdiv
__p__commode
_controlfp

kernel32

GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
FindFirstFileA
FindClose

ole32

CoInitialize
CoGetClassObject
CoUninitialize

oleaut32

VariantInit
VariantClear
SysAllocString

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE