243da3e558f47e56931d1673eab6c2eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

243da3e558f47e56931d1673eab6c2eb_JaffaCakes118
Size

69KB
MD5

243da3e558f47e56931d1673eab6c2eb
SHA1

0c658b5026432cf231466470abce0f2fe53d0efc
SHA256

4062c0c96cdfae3cf7f73fda30c5a19eaddd9bf3fe492166589ee10c8d6a96fe
SHA512

80d41e3afaa556281491ec250be2b3ad81047a22dc1adfd5c9de35313f7ced00cd16e231fc50171e3135e2c3685dd77b23ecec23d37c2c1a3d541d5e6f1696ea
SSDEEP

1536:lxK/ftMsWbG92WklTpjw70cWNlNfYB0Up:SFMsSQkTA0cWNlNfYB0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
243da3e558f47e56931d1673eab6c2eb_JaffaCakes118

Files

243da3e558f47e56931d1673eab6c2eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa9013123fa4f44c05c28b6066f6034e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ