ded86351e7c6c5de7c3952885f86c35b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded86351e7c6c5de7c3952885f86c35b_JaffaCakes118
Size

146KB
MD5

ded86351e7c6c5de7c3952885f86c35b
SHA1

f5a2b1cc215d4be2c33359ebf7827804991b658b
SHA256

06cb9d5d780e252d0cb5cbaeeeecd2be6383cf10a2690246d7fd88cf69bcc297
SHA512

a19a77b58a692cb6c120bd558313c328c7f04cd43001013fbb0988966589ac02d90349c25459f8e5e4dd5b83316f075f739472090810e101e1162ca0e7fdae7e
SSDEEP

3072:29ptZXyQRrVxpMoci7SqA4RAbbxNLbIv19dSQw+v:29pDRjfeqV0b0vHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded86351e7c6c5de7c3952885f86c35b_JaffaCakes118

Files

ded86351e7c6c5de7c3952885f86c35b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

202a49d05f3ce3e7da3f19b0b9a41525

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

GetModuleHandleA
GetTickCount
VirtualFree
GetProcAddress
FindResourceExA
GlobalAlloc
GlobalFree
CreateThread
WaitForSingleObject
CloseHandle
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ