dea2eea82de5722de369f5e4447f87f7_JaffaCakes118 | Triage

Sharing

General

Target

dea2eea82de5722de369f5e4447f87f7_JaffaCakes118
Size

71KB
MD5

dea2eea82de5722de369f5e4447f87f7
SHA1

aec1b45c21e88fab89a266872e7a4d60d167ac0e
SHA256

23bad6478fb4066de29eee5511239e13ac6d215f1a98c43efead9d1b62ffe92a
SHA512

aa8ec33e55d7cb3b4927ae155a354875fd9da8f58d22f779f97a372ddd9834641977f1a5dd183051869d2f2ae0885b7a328d3795a044780c83c7c6d726ea9cdf
SSDEEP

1536:6MTKdJYU4zxN3j7Cy672stRJ971Zr+vzC1kr:fT8JYU4dZj7Cy02stF11+vzxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dea2eea82de5722de369f5e4447f87f7_JaffaCakes118

Files

dea2eea82de5722de369f5e4447f87f7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ed0afa3751f76d79741a9f600251cd38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadContext
FindResourceA
SetThreadContext
WaitForSingleObject
GetCurrentThread
GetCommandLineA
FindResourceExA
CreateProcessA
GetStartupInfoA
GetLastError
GetProcAddress
VirtualAllocEx
LockResource
WaitForMultipleObjects
GetModuleHandleA
CloseHandle
WriteProcessMemory
ResumeThread
CreateThread
HeapFree
HeapAlloc
ExitProcess
GetProcessHeap

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ