f3df888700a0df8b5909a4f0b70e622c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3df888700a0df8b5909a4f0b70e622c_JaffaCakes118
Size

144KB
MD5

f3df888700a0df8b5909a4f0b70e622c
SHA1

a9deaa451a92b687e52bb102619a8b6fc11608da
SHA256

4d5abb63ed80939a4a5ddc0f606a3af98d4fe2a8c211c06aa1babe663beeb70f
SHA512

13a001193a869a02092c48cdca172faac90ab0f9c2f13014fb5bc4a5b833b3c005700840ad4df1fa4436f295503804b68565e3687ac934a8a69b600cf70b8a9b
SSDEEP

3072:H3yQRvyPZAdxKEdGoBHNrfxYrxVb1tj/0xx8VaOE+Bgy02IAYsFQK/:H3vvqAdlGoBHNrfxYrxVb1tj/0xx8Vag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3df888700a0df8b5909a4f0b70e622c_JaffaCakes118

Files

f3df888700a0df8b5909a4f0b70e622c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d9997cd02a5e065ce78d5e96ae8cd98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

SetCommBreak
SetLocaleInfoA
HeapWalk
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ