e7b5de4cb7dca05c0eff0775f927c6de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7b5de4cb7dca05c0eff0775f927c6de_JaffaCakes118
Size

148KB
MD5

e7b5de4cb7dca05c0eff0775f927c6de
SHA1

f085a7768a7c44d517942fe27f95d69ed6f80fa5
SHA256

ed35c462e5da499c72758cc498f002f0d9eae8ef79ea44702de6e0697c60ff28
SHA512

5af92b0b8b1c0a5ae116dffac25a4e37447e104df6c886def0986c1f4108d0749261f54c7521947cd2597343e71340b068b7c4fdf126d794c466e5511bf5090f
SSDEEP

3072:zSQtXIS/77ojqDlAZtyLRz2klnxegnS8cQijknQRKCxkJpyp01SytpG5ChBa52Gz:zSQtXISzsjClAZtNqx5nTcQakntCiEp5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7b5de4cb7dca05c0eff0775f927c6de_JaffaCakes118

Files

e7b5de4cb7dca05c0eff0775f927c6de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c57f2f12cd36e95602b07204b6ae224b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
GetProcessAffinityMask
GlobalGetAtomNameA
BuildCommDCBAndTimeoutsA
GetVersionExA
SetHandleInformation
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ