f55469078242dd69f71096c7dbbe51fe_JaffaCakes118 | Triage

Sharing

General

Target

f55469078242dd69f71096c7dbbe51fe_JaffaCakes118
Size

99KB
MD5

f55469078242dd69f71096c7dbbe51fe
SHA1

0a0b91a8d7eb4dbb899ac20ce1026bda37c9497e
SHA256

bdd1aa5b1d3e8dffe4507f2bb89cb6aa1978c19df531b0800830c3536f5b066e
SHA512

e03d1aa306655a3d1ea2efc767659bcd1b0713299dbc97b5580bab896ac2a4ff87f292096d97873884487fe729f7123385c137f390ef2f827bfde9afa1701441
SSDEEP

3072:3OoLdffdkno7mKfDvgcTifQnlzn237/Zk17C:3Ow/t7mKfr+939aO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f55469078242dd69f71096c7dbbe51fe_JaffaCakes118

Files

f55469078242dd69f71096c7dbbe51fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a26e1850953f54d0d0841f02e97fef29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetProcAddress
VirtualAlloc
LoadLibraryA
GetStartupInfoA
VirtualProtect
DeleteCriticalSection
SetLocaleInfoA
UnlockFile
GlobalMemoryStatus
GetModuleHandleA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ