0a2c58f60304d8836da80e8faa9d90b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a2c58f60304d8836da80e8faa9d90b0_JaffaCakes118
Size

79KB
MD5

0a2c58f60304d8836da80e8faa9d90b0
SHA1

17dd15ad94d287629321f88ee7b797141164495e
SHA256

d9ae6714b53bb1f961d34259aad05c4aee80b5cf07431a2e18076ad4485a64cf
SHA512

7fe0be6642c347a5289f905d7c9f7db103dd7841b889e7365ab945b2e54d9dbeb4d052aacd59921a0fe0ac87c1226e492e8f3252d3cdd195cd63f63f6b560097
SSDEEP

1536:YuRoNv6qTV6kxjstpK5pH3Bm00Z3Xko5ZtXf31NsM0TO1S3Uxix4/FBAlW5l:YuG6qTV6jHKrHxm00Z3XZtd0y4z4Nj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a2c58f60304d8836da80e8faa9d90b0_JaffaCakes118

Files

0a2c58f60304d8836da80e8faa9d90b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1f2d17b1b3c6fd1f2c6b665a6614f015

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
printf
fseek
fread
__set_app_type
fwrite
_initterm
_except_handler3
fclose
_onexit
strcmp
free
__getmainargs
fopen
malloc
_adjust_fdiv
exit
__setusermatherr
strlen
sin
_exit
_XcptFilter

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ