d94ee1c68667971dbc94fa29a51425bd_JaffaCakes118 | Triage

Sharing

General

Target

d94ee1c68667971dbc94fa29a51425bd_JaffaCakes118
Size

82KB
MD5

d94ee1c68667971dbc94fa29a51425bd
SHA1

8fa0e5886c13ea08ce3985ce86b12cdf45967440
SHA256

cd1884569279f983b5b2be0ed933b1350cd7380ae47c2f57a6e25783cf6bd779
SHA512

da8a4d6f44b470d8255cb723c6eb49cac95b10db4779eb24c6874f6f7f0b72c3822d36c2512e6da56af790b400f16928d5761253e73e319bf90b9fe9046addd2
SSDEEP

1536:IFEwgqPyIqNt6+4auQg3dTXVyaH8g6CAzzl:Pw6lLuLGahlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d94ee1c68667971dbc94fa29a51425bd_JaffaCakes118

Files

d94ee1c68667971dbc94fa29a51425bd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efc4e2b1a3f42bcbcff74a2290441ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

malloc
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2

kernel32

GetSystemTime
GetProcAddress
LoadLibraryA
_lopen
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

user32

IsCharAlphaA

Sections

.text
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ