JaffaCakes118_4b3832d77a56b1aec0475ecea63e2530 | Triage

Sharing

General

Target

JaffaCakes118_4b3832d77a56b1aec0475ecea63e2530
Size

344KB
MD5

4b3832d77a56b1aec0475ecea63e2530
SHA1

1fd692286b788b7a50ff0de4fff8933ac3868863
SHA256

6bc2f7766d637c77fad1088d171fdd57b33ec9052d88aea0382f674e56a13b4b
SHA512

1470af2fef81afbdcbdee41f1e91d68ced67ff1683f6ce95c287a8df57639291ffbf43f35d01dd993bea80f5267f81c9c66672bc08b3a31d7a82e5142f6d05f6
SSDEEP

6144:cQf+oOIKXOUSdaV8ekDiNiaROjXkqGKPHkirffY4mLH0vmA28p/k:yoOxOFgWPaROjXsGHkirYJcmAP/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4b3832d77a56b1aec0475ecea63e2530

Files

JaffaCakes118_4b3832d77a56b1aec0475ecea63e2530
.exe windows:5 windows x86 arch:x86

6fbcb5d02405ce9a17326db897abc26e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wvsprintfA

kernel32

QueryPerformanceCounter
GetProcessHeap
WaitForSingleObject
GetCommandLineA
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
HeapFree
HeapAlloc
GetStartupInfoA
ExitProcess

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ