0241587b7b36bada8180e94904fa1c77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0241587b7b36bada8180e94904fa1c77_JaffaCakes118
Size

106KB
MD5

0241587b7b36bada8180e94904fa1c77
SHA1

0a7377c67f401ead81d3295d5f7c00cd5929bf41
SHA256

8ed1639bcad76c3ed677ade369fe37c07821570f8f1f53748f9a4a921a884e26
SHA512

4271586971408fe2ff943e1204f7a4afb70dfc8792c56821751e673fe05279e32939176ccda4928570d45ed899df29ec393a2b3bac690015c9620131baa22452
SSDEEP

3072:shyINnBnfyLE3m377CrvnlV0QGpTotip56T1RxjWe8:shyINnBfyLE3mr7CMN9otxXxl8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0241587b7b36bada8180e94904fa1c77_JaffaCakes118

Files

0241587b7b36bada8180e94904fa1c77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1150a5224b4f600a4f5d965e4794685

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
GlobalDeleteAtom
GetCompressedFileSizeA
CreatePipe
SetThreadPriorityBoost
TlsGetValue
GetProcessPriorityBoost
LCMapStringA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ