155baab09bbe0b74ce56b7e8a031e3f8_JaffaCakes118 | Triage

Sharing

General

Target

155baab09bbe0b74ce56b7e8a031e3f8_JaffaCakes118
Size

693KB
MD5

155baab09bbe0b74ce56b7e8a031e3f8
SHA1

4beb2106b5d106e59444188de227705781585948
SHA256

d7d13ebcefca0d0f4e334e90c008082aeba9cca2316d7f0170cd2880ffff2ca1
SHA512

48eed919308173c8ca9de67d878cc2e4e466c25333ab7666a80583596a6bc24b24c1ce8a8d28ac0d466bdfc97b5ee21a2bd05f3d6e4f418a9e43a30009f3dc2c
SSDEEP

12288:rgEkyVE282PwCyGCf0ZInPWlQzllNFmrgO1YKyOy4I0ATuxOHevlKCZq:2yVnP920Jqzfz49YuxO+dKKq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155baab09bbe0b74ce56b7e8a031e3f8_JaffaCakes118

Files

155baab09bbe0b74ce56b7e8a031e3f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e7d6e2b1a006eae3d50d918bb784833

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetTickCount
GetLastError
GetVersionExA
lstrcpyA
lstrlenA
GetModuleHandleA
LocalFree
lstrcatA
Sleep
GetFileSize
GlobalFree
FreeLibrary
CloseHandle
GetStartupInfoA
GlobalAlloc
GetCommandLineA
CreateEventA

msvcrt

toupper
_adjust_fdiv
wcstoul
rand
__p__fmode
memmove
_exit
__CxxFrameHandler
wcschr
_acmdln
__setusermatherr
_except_handler3
wcslen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 686KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ