JaffaCakes118_64d668837555fb488088528fe78f26b6 | Triage

Sharing

General

Target

JaffaCakes118_64d668837555fb488088528fe78f26b6
Size

105KB
MD5

64d668837555fb488088528fe78f26b6
SHA1

a219c9cae72221ec96b7e34c625600fd680aa07b
SHA256

b43f5db3c9d56c494be07e0d2a82198ab2ab99f1ff46d4ee85403b833b140d0b
SHA512

e2c345c298492dbc947b9200b3c67dcff15236e67a6120712f47a3f249fde18e6c0a6d1b5eea4517c0f73e224a0ecb3372d0737874abb8f989da16c310bbb61f
SSDEEP

3072:XFNP+8u21BPpqaeXBry5jwaaHw7Koj4r+VuE:XFNP+8ucBRqaeROrV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_64d668837555fb488088528fe78f26b6

Files

JaffaCakes118_64d668837555fb488088528fe78f26b6
.exe windows:65535 windows x86 arch:x86

273f55e5c1c8c6f8064cb276db9ffbb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA

msvcrt

_except_handler3
__p__commode
__setusermatherr
__p__fmode
_initterm
_adjust_fdiv
__set_app_type

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsr1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE