06a6341ec48638043664e49726f88afd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06a6341ec48638043664e49726f88afd_JaffaCakes118
Size

1.1MB
MD5

06a6341ec48638043664e49726f88afd
SHA1

38994af210bc300732c33e7d0964129df3b01490
SHA256

755a6aa975d75bcec08b8c04f3571231977aab6ae5f461c1022431f4142f6b5c
SHA512

ef2212e2f2511ee2b0edb871a8f0ad1397cb7a5ef08c36024a3c3a2caff4ea4a9d82ded2063b918df04b15f5274ef9eab60854d76a4f4ba2c9e9da1fd821961b
SSDEEP

24576:yxQpWYBShBFaohI4Xsxnz3s/D3csQcgW5osUVbBcLGNAQrRXxVbQ0N7fio:5O2sOngxg+Z4cLG71Q2fio

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06a6341ec48638043664e49726f88afd_JaffaCakes118

Files

06a6341ec48638043664e49726f88afd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

257feec2d0871ace42c7314020ae2133

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
GlobalUnlock
SearchPathA
IsBadReadPtr
SetTapePosition
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ