fe5b9cdaba033d1862ab856b3a029ee8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe5b9cdaba033d1862ab856b3a029ee8_JaffaCakes118
Size

3.5MB
MD5

fe5b9cdaba033d1862ab856b3a029ee8
SHA1

36ae0aa4229e8e31806fc832bdafc5008002fc6e
SHA256

98259d219cc0db8a5cb6371b2860a753bfe363c028bdea9e99d9d942672100a3
SHA512

eb08070f4b3f6a0e0459f2ab5bdbab151480ebf926b1c43c487dcdd3e94c9434b4633df3155e9ee3d6b3235401b6d790665bb6dc0f5bf2f0b322f3ace90c4412
SSDEEP

24576:TWDM5pt6Mbwx8bIPDP96TlN9wZCy3IcSs0BlVIUp:64ShlPkb9GCkTiVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe5b9cdaba033d1862ab856b3a029ee8_JaffaCakes118

Files

fe5b9cdaba033d1862ab856b3a029ee8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dd9929b1f3c9a1c8830954c8a915dcde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

IsBadWritePtr
GlobalDeleteAtom
lstrcatA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ