JaffaCakes118_61112ee7a7ca1698df78e0660d80892c | Triage

Sharing

General

Target

JaffaCakes118_61112ee7a7ca1698df78e0660d80892c
Size

104KB
MD5

61112ee7a7ca1698df78e0660d80892c
SHA1

af27ca28861b1e6728f12ffe686457501c07ae89
SHA256

2df4d98144483bd76f18ab6f6327c39e1d9c542058ad0ee76b93ea34d4a64381
SHA512

118342dd3787c29a7e7fa3e584ddf5820891fa3d4b38ac72a4a601fc49d4093567e98768cd98abefed89705776373065da87477e87d418f2dd9d6bd11b85135e
SSDEEP

3072:ZVkjpJCs2Y/mCYFGApkuEVFR2PUJaK2xQJYKIE6LVM:bsD2YmCnApkuqX2PUEHQyPjLV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_61112ee7a7ca1698df78e0660d80892c

Files

JaffaCakes118_61112ee7a7ca1698df78e0660d80892c
.exe windows:5 windows x86 arch:x86

5624dbf5142c088aae5da9911b51171b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

R:\Gain\Wtr01\Public.pdb

Imports

kernel32

GetWindowsDirectoryW

Exports

Exports

reverse
?militaryKeyA@@YGEUturbocenter96@@PR
?resideCorrectA@@YGEUturbocenter96@@PR

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.slor
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lpet
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ