56f42fe60f8b72add62b98f357e88c71_JaffaCakes118 | Triage

Sharing

General

Target

56f42fe60f8b72add62b98f357e88c71_JaffaCakes118
Size

88KB
MD5

56f42fe60f8b72add62b98f357e88c71
SHA1

2685ab37393478df9689da17c6c0f513b0b48648
SHA256

0e3f03fab3bceead721736d7d9a6a3c367ddddda3bc5e8d02fc8b668ddb4d58b
SHA512

ac942d5af7b9df1b1ae52bc1695f92647580368ba68dc190e2d72ad7063ac44a1b22e0da040c73a985ea705ba1379c6170010029c5d9a10ad5d231279face5df
SSDEEP

1536:hpWEO7F0OuPpP1F5yyPCOeiluU/mWTsTEM/jWhYadw4QhKJhY+elfogG:Y2RP7DHEU/4WvQhck0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f42fe60f8b72add62b98f357e88c71_JaffaCakes118

Files

56f42fe60f8b72add62b98f357e88c71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a368c7abc6384cf09e2a2845acb6b97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
ReadFile
GetFileSize
CreateFileA
Sleep
ExitProcess
GetModuleFileNameA
CreateThread
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

malloc
_except_handler3
free
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strstr

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ