233d445f980701422da9c6d22c9e5312_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

233d445f980701422da9c6d22c9e5312_JaffaCakes118
Size

121KB
MD5

233d445f980701422da9c6d22c9e5312
SHA1

8b183c8576e4d2a74b741d18223a297adbca22d3
SHA256

d72576096a9c3fd82d172bea63f4bfec2741e01bc58b00755be759aadb0c65f0
SHA512

d12cd6bc23a08173c6cc7f4cf7fbd6bfb65dfd3a08f0987608a76adfb8458266494350bc161eedbfbaa49c27bb5a33a6695e56acf8fdf26bc04ffea6723c7eb8
SSDEEP

3072:sO9owvPh05T2Jw/SgrfiXhkw7G/TE4OGO8:pRPh0kJw/SgrfrR1OGO8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
233d445f980701422da9c6d22c9e5312_JaffaCakes118

Files

233d445f980701422da9c6d22c9e5312_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6af1a05b18dc46eb9c768813463abe65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

WriteFileGather
VirtualLock
GetProcessShutdownParameters
SetConsoleCP
VirtualAlloc
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ