JaffaCakes118_3a076de6d9fefcc4be060112f0980c54 | Triage

Sharing

General

Target

JaffaCakes118_3a076de6d9fefcc4be060112f0980c54
Size

265KB
MD5

3a076de6d9fefcc4be060112f0980c54
SHA1

aa61d91df6ad1e4e6b68cc467cb3dbaa2d2acc9d
SHA256

557120f91602d4bad819b50af06067c2f251505b06069908c88b645cd7c3b35c
SHA512

214df484e8c551de29dc141cc04ef54464516564c6cc149254befe571045975ba58dd5dc9a139bf8753ecfcc6953e880edc69e5378fb8189c94cc26c65733dc2
SSDEEP

6144:zR9swpYl6n4XMg0U/7ThqIXgxxN4A/m2e/8sAH:1Np888b7NqYM/4AN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_3a076de6d9fefcc4be060112f0980c54

Files

JaffaCakes118_3a076de6d9fefcc4be060112f0980c54
.exe windows:5 windows x86 arch:x86

ba9778150f361cda6698c7224e16ad92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetSystemInfo
SetConsoleCursorInfo
HeapAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
SetConsoleCtrlHandler
HeapFree
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
IsDebuggerPresent

user32

GetSystemMetrics
GetSystemMenu

gdi32

GetSystemPaletteEntries

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ