da25d375d700344eeb823fa301f7dabc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da25d375d700344eeb823fa301f7dabc_JaffaCakes118
Size

24KB
MD5

da25d375d700344eeb823fa301f7dabc
SHA1

26c33f51b7ed7193b1e3ac2f5cfff55b77227d95
SHA256

cd9a63ae8339d24b3c667a17c4764ecc080fafea5ee6a5c023884aac59ce7adb
SHA512

b2909256e299995c86b641dc9e68d05f32943cf20f6e9284b21f13f0932231fe6452ec32c3b8740053b4d111a99701b31bcaad3096f6cce463154ae617625ddc
SSDEEP

768:+eq4xhjjdNzo7hua+amOTEiOOKyyXoZ+kSOgbzNZVBbCcHj:+fGVMcafEHOKyyXy+lhbTV8a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da25d375d700344eeb823fa301f7dabc_JaffaCakes118

Files

da25d375d700344eeb823fa301f7dabc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8fdd0ba0220f1d1847aa509540347d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCalendarInfoA
FindAtomA
ExitThread
GetModuleHandleA
GetStartupInfoA

advapi32

AllocateAndInitializeSid
CheckTokenMembership
FreeSid

msvcrt

exit
_acmdln
__getmainargs
_XcptFilter
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_initterm

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 775B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ