f708f00b7f8c04f1ada269f97f8a63aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f708f00b7f8c04f1ada269f97f8a63aa_JaffaCakes118
Size

125KB
MD5

f708f00b7f8c04f1ada269f97f8a63aa
SHA1

c1fde7b159f48faa16aedbe5bd4952f530f97191
SHA256

cd3c32a7b22b68f9f28a99a3e05eae39908168d7b3e3c02875f9041a82635434
SHA512

dbe5b649551b88da977bed2bd9e89c2a450d39cd3908a0076159de754155eed1cbc09e6000dd0839fad124c88ffd40f58033387337ab15b87132f400026e375d
SSDEEP

3072:4GS/EH0x/wbZuxEXhZ+hJvn3qM+cOpBpvpdj/LLCJ:4zEnjLGJCMbIBpvXnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f708f00b7f8c04f1ada269f97f8a63aa_JaffaCakes118

Files

f708f00b7f8c04f1ada269f97f8a63aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b76537a778fd47caa88e0a9f77ef78fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
VerLanguageNameA
InterlockedExchangeAdd
VirtualQueryEx
FindNextFileA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ