df487e779ad5cc306ebfb0fe1ec3f412_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df487e779ad5cc306ebfb0fe1ec3f412_JaffaCakes118
Size

112KB
MD5

df487e779ad5cc306ebfb0fe1ec3f412
SHA1

4c69c57f849602fd329578a01a2b6d68fa1de3ed
SHA256

30d937d7a9c1fee80ced29a8595667371f6ae3d1be0c998afe3134fff55fee2e
SHA512

cc5967cde528e6b10cf641a571c47744ea4dd71bb0857c0355280c4a923e8345a955c96163b33d63fd8ca891cd2ce72f22876dc966b87b9f7effb5fda848a396
SSDEEP

1536:Nx9a0f+zYJasgqj2wpWe2gZ7rgaG9CUDfOBILTHfyx+5KQeIwT1eTa:jZf+zY/g59U073DWBI/Hfn5KPteTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df487e779ad5cc306ebfb0fe1ec3f412_JaffaCakes118

Files

df487e779ad5cc306ebfb0fe1ec3f412_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4cd05c0802eb743f2da368af6e11fbd4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetStartupInfoW

shell32

SHQueryRecycleBinA

msi

ord212

msvcrt

_adjust_fdiv
_onexit
_exit
_XcptFilter
exit
_wcmdln
__dllonexit
_initterm
__setusermatherr
__wgetmainargs
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ