98c2cb8719bd035d9de06638e3c0b700_JaffaCakes118 | Triage

Sharing

General

Target

98c2cb8719bd035d9de06638e3c0b700_JaffaCakes118
Size

109KB
MD5

98c2cb8719bd035d9de06638e3c0b700
SHA1

6523221473eea92b0bdbed317ff5bc705f1d7255
SHA256

e8c19f4bb05c49c2812eaeca49071bd60786b94399da379f680f99d2f9887c57
SHA512

8dbf44d1b1998efc7c9e1aeacb0c2683b99ab952e23de0f21898141c8b1eac3ec0fad2c8a184afe185c09e4e34bb2eb9b543f3c822c5ecb9dca62614b1b5a4a1
SSDEEP

3072:AE/dTNK0T3kD+LUxd732ZLgBIv//aaHw7Koj4rtA/w:L/XTxLUf730LJP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98c2cb8719bd035d9de06638e3c0b700_JaffaCakes118

Files

98c2cb8719bd035d9de06638e3c0b700_JaffaCakes118
.exe windows:65535 windows x86 arch:x86

8c868e802e9c8f511362040217eca589

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect
GlobalFix
GetConsoleAliasExesLengthA
HeapSummary

msvcrt

rename
_mbspbrk
_initterm
__getmainargs
__p___initenv

netapi32

NetUserGetInfo
NetWkstaSetInfo
NetApiBufferFree

Sections

.text
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ