0202638b41a53dc2c8bfd5e8e3571dc6_JaffaCakes118 | Triage

Sharing

General

Target

0202638b41a53dc2c8bfd5e8e3571dc6_JaffaCakes118
Size

752KB
MD5

0202638b41a53dc2c8bfd5e8e3571dc6
SHA1

5cbec4a6342b27c45a43bf9120af23e0e36fc7ff
SHA256

cf639b797a702a7559088e37347200ffabb1659d9d88188aaee0e22029c2999f
SHA512

d945d844dd18e5ffef2d3c88f53b70525b2ca9f63e32fa80a1ed8e9afbc75592af6e5c5042aa69c4901ee936b920a9da18cb52b1ce03eb19e922feea73adc309
SSDEEP

12288:S+iqg8qJvIIHeuEFYP6igdHf2DiqAkpHlHB5OglE5uIo5Jr/1Thp/RLx1:Jiqgx2I+ueYiigdRqnh53lNJnr9P71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0202638b41a53dc2c8bfd5e8e3571dc6_JaffaCakes118

Files

0202638b41a53dc2c8bfd5e8e3571dc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2af5fcf38f4e5ce5ad328e3cd558d98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

HeapLock
WriteFileEx
PeekNamedPipe
UnlockFile
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ