JaffaCakes118_1fc8a045d27bb49066562441be908997 | Triage

Sharing

General

Target

JaffaCakes118_1fc8a045d27bb49066562441be908997
Size

124KB
MD5

1fc8a045d27bb49066562441be908997
SHA1

a04b9dd5f27932f6cdb6ddfcecb36f15e73041ed
SHA256

36d3b50ffe4f63ad56648c586d76b80094c625db7c2c0309b9848dd95972f123
SHA512

9e4f2c7c535626fb1a9560229658966c1affba2d24652721905ee590cba338a9fb58ae1ff019a20a37e9596d78c000e263fc687c67f1219ded799d59b35b6cec
SSDEEP

3072:vDSKiauBZz/DhceNw1OTw+XIU5jwaaHw7Koj4rBV:rSKbwhdcqYIhXNA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1fc8a045d27bb49066562441be908997

Files

JaffaCakes118_1fc8a045d27bb49066562441be908997
.exe windows:65535 windows x86 arch:x86

d266caec701d31753cc424a17d4dea44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA

msvcrt

__set_app_type
__setusermatherr
__p__fmode
_except_handler3
_adjust_fdiv
__p__commode
_initterm

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsr1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE