JaffaCakes118_464a61e057e5c8f920c54c02a87c1a1a | Triage

Sharing

General

Target

JaffaCakes118_464a61e057e5c8f920c54c02a87c1a1a
Size

52KB
MD5

464a61e057e5c8f920c54c02a87c1a1a
SHA1

7fff9611f24c8570372ca5a14eed48434ccf2f49
SHA256

445d8ca0bead358145dbc7cd75016f591a81ffd551059c8606db3b7223901f89
SHA512

b4b1bc88f87e8d490ca8b9cccc1d23b87a5244379fc121c54af5da1b839aa516683117176c7fcc61a69f5deeaee08623db94d88f85d6d92e52cd4a1d6ab0e982
SSDEEP

768:UTzILwfNhYeVL7ZQ1V5pmfdufoIUhigHcbG8oqRDC7epbZ9R1P6UuIKI:IvFX7yV5pOo5QUtoZepbZ9P63IKI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_464a61e057e5c8f920c54c02a87c1a1a

Files

JaffaCakes118_464a61e057e5c8f920c54c02a87c1a1a
.exe windows:5 windows x86 arch:x86

a462310d8dc17dcc7ee053877ca4f02e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\InfoText.pdb

Imports

advapi32

IsValidSid
GetUserNameW

kernel32

GetWindowsDirectoryW

Exports

Exports

GeometryOutput
GeometryInput
?DunnoCapatice@@YGPAXUtagSIZE@@@Z
?ForceCountSys@@YGPAXUtagSIZE@@@Z
?LabelRegit@@YGPAXUtagSIZE@@@Z
?LocalTimerOn@@YGPAXUtagSIZE@@@Z
?SemiForte1@@YGPAXUtagSIZE@@@Z
?SemiForte2@@YGPAXUtagSIZE@@@Z
?SemiForte3@@YGPAXUtagSIZE@@@Z
?SemiForte4@@YGPAXUtagSIZE@@@Z
?SemiForte5@@YGPAXUtagSIZE@@@Z

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ