156ac824402ed61d50c9d3090119e99a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

156ac824402ed61d50c9d3090119e99a_JaffaCakes118
Size

79KB
MD5

156ac824402ed61d50c9d3090119e99a
SHA1

98f7c064e2f96486e8e762acb0a8e51cd907f55b
SHA256

ef8d08b5eddcb6ceebe4597e3f9ad202d56538f4d4af6c340cf9713349cd0ec1
SHA512

92ff05a6a2ee994f1ade987f73466f836f20a243adad66671583900d63a836be29968f228df9ae962cdb0b2ab849a10ca7a3a0d829344f6f87996020323dc5c1
SSDEEP

1536:igbxOurfPjvRTWNpi1xgi0/ZVraFtvQA7p5qQII4NjTjO4kqDr6Z7:ig1lrDvNHjgi0/vyIX5TjMwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
156ac824402ed61d50c9d3090119e99a_JaffaCakes118

Files

156ac824402ed61d50c9d3090119e99a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62f971bc93507bd77203478392e59604

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
fclose
exit
_initterm
__set_app_type
__setusermatherr
fread
_acmdln
_exit
free
fseek
fwrite
_except_handler3
printf
fopen
_XcptFilter
strcmp
__getmainargs
_adjust_fdiv
sin
malloc
_onexit

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ