056117feed59ede6a37b1e40da5a5761_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

056117feed59ede6a37b1e40da5a5761_JaffaCakes118
Size

118KB
MD5

056117feed59ede6a37b1e40da5a5761
SHA1

6014231cf8d9e17c58a3bad348123d00ae9de626
SHA256

497bb8e4efcc424924216392615ae487f27efa2701c2f846817f034c04dac6af
SHA512

e02d3764f0438d1bef48cfd312b425f5c7a457165eb99e15296b7ce364a957110b04b9dbce20f80bcaeea5d3e759a264b38e76e54dd83b348a7669e6e82a52a7
SSDEEP

3072:CGO66cinnnD/wVpznnnnys2nnwBRDtnMnnxOip0r:E66tnnnDSnnnnyTnnenMnnAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
056117feed59ede6a37b1e40da5a5761_JaffaCakes118

Files

056117feed59ede6a37b1e40da5a5761_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d722f0404dbe384bd6967d3d5b4be92c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

OutputDebugStringA
GlobalAddAtomA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ