563737b34e7de80cfed7667cc559b9b0_JaffaCakes118 | Triage

Sharing

General

Target

563737b34e7de80cfed7667cc559b9b0_JaffaCakes118
Size

1.8MB
MD5

563737b34e7de80cfed7667cc559b9b0
SHA1

16dfedbbe60a48f4a74f6407072c2bab8b62858d
SHA256

0fd805837fd0b1c196df557e1d44a6cc353f61839e84bd62677307f24a66ded9
SHA512

1aeb8b089e20fb2af16cc6ea3e5b89cf17132e34361a332e4136422944f4e740a577200261c41097de490f111e5e1ca3d6e6642620c8abb930f0cfbb6e8d762a
SSDEEP

24576:8s3eNqfZ+KTiNRpz3TtcBfadBmwBIC1U2OiSxYgfje135XGBqVBCejz3/xWVZ+pk:5ecf4/5tJdBmEnvvgLe13xJjzkB+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
563737b34e7de80cfed7667cc559b9b0_JaffaCakes118

Files

563737b34e7de80cfed7667cc559b9b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

38492d76d703afb23c54fc5733eba1d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemPowerStatus
_hwrite
HeapValidate
GetSystemDefaultUILanguage
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

GetClipboardSequenceNumber

advapi32

GetSidSubAuthorityCount

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ