13f3855a1d2ffd26b5834b3def8e21ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13f3855a1d2ffd26b5834b3def8e21ad_JaffaCakes118
Size

7KB
MD5

13f3855a1d2ffd26b5834b3def8e21ad
SHA1

f5f89363d1cb4ed416acc5c258872358d9c343e7
SHA256

2be3491b130065a1661cf08cfd8c4cc703bed158e94e3bd97d43d1c8a07f1c18
SHA512

79cecec8bc68a009de74ccac4511f93f0b00b9e80930aae7ba0c422dc2da34c5b9b7b6de11f590fdf2cbbb816d643f75f64c4f466c9a426448bb2e7c43c8ecdf
SSDEEP

96:qUieU9bJ+EOhDnoReyEsr3sUp9PtboynGhtj7KCto:AtYEEIHbP1oynO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13f3855a1d2ffd26b5834b3def8e21ad_JaffaCakes118

Files

13f3855a1d2ffd26b5834b3def8e21ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4b33cabd121c4c3c2594a0ee5c2da6e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f97f9f9779g97g79f79f9779g97f97f9f9g797f97f9g77f97g9g

Imports

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
__set_app_type
memset

kernel32

GetModuleHandleA
Sleep
LoadLibraryA
GetProcAddress
GetStartupInfoA

user32

DeleteMenu
GetCaretPos

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ