JaffaCakes118_1b9323716eee3a15fbfaf3114a84587b | Triage

Sharing

General

Target

JaffaCakes118_1b9323716eee3a15fbfaf3114a84587b
Size

104KB
MD5

1b9323716eee3a15fbfaf3114a84587b
SHA1

4d98888b359eac14ad25c9e23241d79916e266e2
SHA256

6298708d73d2ab3b75c696c339cd9725b5b3b5666e2318b4743d47ccfe0398b1
SHA512

0aa4adcba854a130c0d055bc7d7e43a670f93d4f3dc53a214aaf1de25faf473deca442f4c8de24032d93d650ccf45dca1375ea9f33357d6c5fcbf37a384ac1ef
SSDEEP

3072:rwp5qQH41CSgTnXIQo1rmGT8ahrFzk8jwaaHw7Koj4rt8:rwLqH8SanXKmND8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1b9323716eee3a15fbfaf3114a84587b

Files

JaffaCakes118_1b9323716eee3a15fbfaf3114a84587b
.exe windows:65535 windows x86 arch:x86

229048815856b8bbc5d416cc52059312

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA

msvcrt

__setusermatherr
_adjust_fdiv
_initterm
__set_app_type
__p__commode
_except_handler3
__p__fmode

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsr1
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE