f86d64f8e7bd002f1cbf9bdc94332201_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f86d64f8e7bd002f1cbf9bdc94332201_JaffaCakes118
Size

135KB
MD5

f86d64f8e7bd002f1cbf9bdc94332201
SHA1

e007a4fa7f38f70de9f8bd704f23153b6ca88723
SHA256

e9b401b85da0d76604d6753dc098a2396e55bdb96a50c172ec43299551d279eb
SHA512

cf54ec5cd08403a7be451102ffa29b47d1b96bf845b493d8cfa836a7fa33cc70e839e8f6df816acfa651e9c2d8322705d9df2a37b89c5c6e849a89bd0621e8d7
SSDEEP

3072:5YD8B/6936y6mqwqdRrUuBnHonrriwxUmVG7hTWdye:ueWzqwqHwoHoSBmo7hT4ye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f86d64f8e7bd002f1cbf9bdc94332201_JaffaCakes118

Files

f86d64f8e7bd002f1cbf9bdc94332201_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b7e9c8f9f3ff0cd0e42de14eea18888

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

ReleaseSemaphore
SetFileAttributesA
SetNamedPipeHandleState
CreateIoCompletionPort
GetTempFileNameA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ