e1823355ebb918b77c266589cd6d05a6_JaffaCakes118 | Triage

Sharing

General

Target

e1823355ebb918b77c266589cd6d05a6_JaffaCakes118
Size

48KB
MD5

e1823355ebb918b77c266589cd6d05a6
SHA1

372f7bdc0a680afa97ff888fac602d561b701737
SHA256

57cf2366351bc0cbf4dfcfb033ff704263fe4550f46df05c8e4fbe3cb010bed9
SHA512

9a825dd552cdfff9f78a2726cedf453f199f9087b77155c100a270e9cb1a7381f59ab19d3a735459eddde142d7626be6322ad18714c084e06a240eeb889b924e
SSDEEP

768:HR/KhRV17RfsWh8Bu1nfLBTR37rkn3g3R7Hj9iZMbfA0AW:h4V17/2BOfDrk3YpnAW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1823355ebb918b77c266589cd6d05a6_JaffaCakes118

Files

e1823355ebb918b77c266589cd6d05a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eabb4280ac342645164868dcdab18c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeResource
SetEnvironmentVariableW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
QueryPerformanceCounter

user32

CreateAcceleratorTableA
GetQueueStatus

gdi32

DeleteObject

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

......
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.....
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE