f423e92d6707de2f8d45b7acd51ea2cc_JaffaCakes118 | Triage

Sharing

General

Target

f423e92d6707de2f8d45b7acd51ea2cc_JaffaCakes118
Size

4KB
MD5

f423e92d6707de2f8d45b7acd51ea2cc
SHA1

9281830762ea4ab4627facdb49c3c876e63eeba9
SHA256

e2a3b99570070a7c3dd270e3201c75ea7d45b7517240ca7331d992b416c3184a
SHA512

5f93894350fc3f17a5f76c634c2a70f1d87afc163666722cf2e60dab2f4f8774c1dd16d58b24e49824278ab7799379affad9fae818ecddfad922021ffd3e5784
SSDEEP

48:qlcy7+4uiSEu7A9NIX9rAMlpQ4C/W1LdIZWXHW3h55WwG:EV7puinuJZAMk47EWGRnWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f423e92d6707de2f8d45b7acd51ea2cc_JaffaCakes118

Files

f423e92d6707de2f8d45b7acd51ea2cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c9f38d57f27645e274cbc37fa815ee0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_controlfp
_except_handler3
_cexit
_XcptFilter
_exit
__p__fmode
_c_exit

advapi32

NotifyBootConfigStatus

kernel32

GetLastError
GetModuleHandleA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ