05c1b6de49a5b8b6dfed363f3bda4840_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05c1b6de49a5b8b6dfed363f3bda4840_JaffaCakes118
Size

67KB
MD5

05c1b6de49a5b8b6dfed363f3bda4840
SHA1

d7e8c59eeef47afb0bc83dd2a6fc480117ad02a1
SHA256

26028e597749ca8db1cc42e1004f6d5a84fd3492633c2356b2bb4915c3453dca
SHA512

3519787d23a40c6f67d19b2745a34054a54492b481203cf419ccf0a12549665e3cb8362de29dd9d4f4dff2ec70371c27c5e392d5ce42e24197a1f112bb87ce8e
SSDEEP

1536:YjeIbtjqcTu1kWsvrKuqJdradgaphGKJ94LCrdRG2fUryc4phSnWh:Ibdq7kWsDLqJVaTpBT3DCycvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05c1b6de49a5b8b6dfed363f3bda4840_JaffaCakes118

Files

05c1b6de49a5b8b6dfed363f3bda4840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d80ce8fb5bf22ccd6b1804a5b9f6432e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
time
srand
rand
memset
memcpy

kernel32

GetModuleHandleA
FindResourceA
SizeofResource
LoadResource
FreeResource
IsBadReadPtr
VirtualAlloc
LoadLibraryA
GetProcAddress
VirtualFree
LocalAlloc
LocalFree
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ