09881003e3592c849c949442545f68ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09881003e3592c849c949442545f68ce_JaffaCakes118
Size

88KB
MD5

09881003e3592c849c949442545f68ce
SHA1

613403c47af679d4aa43c6578e2eb4773fb482da
SHA256

85eb85fec062775e37f70bcaf2f104d7dd717626c5f897c8e708a8b2f2cb9b8f
SHA512

f95e1aaf54177240178b7f769f217af48633a22dc138ac85ee11ce9b030f56d16edf1df2e1767cf6b85920cd3b59e86a4edc1fc44101bada13640c254eb662b7
SSDEEP

1536:8lvH38yiUxpain60PUDXUEBQKDXxhA43IE49fKeL4KxdigUXkG:aUpUPPnCXPzDXA4419fpTdROd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09881003e3592c849c949442545f68ce_JaffaCakes118

Files

09881003e3592c849c949442545f68ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63015cfcd7ccb986a026fc69c7bbbd54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__CxxFrameHandler
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ