2491b86a7b69a00719ee658a1c37106f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2491b86a7b69a00719ee658a1c37106f_JaffaCakes118
Size

43KB
MD5

2491b86a7b69a00719ee658a1c37106f
SHA1

82937171885b0b691d1230641c309da255daff88
SHA256

063cb0d68234004842792b9717b9bf7e569c8ec9fdad98628cd01aa029b7b97c
SHA512

3d028da5dd6a4323cd516d0f598e98cee77a753b97babeb62ef03e4aff3f9234c2300355711b2370b69867523ce02a7c488f8ffd9d0a56cc34161f5558112194
SSDEEP

768:nMrgypXjSuY0cEKS+jfizzc1CTgCuNlCUSk760xglj1GXwYB6iUh6mmekWLiAnCW:nQgyNS0cEKBjfizXgtlC7k760uj1GAYk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2491b86a7b69a00719ee658a1c37106f_JaffaCakes118

Files

2491b86a7b69a00719ee658a1c37106f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f0c51192786fef3344045e19c74cc60c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetVersion
GetWindowsDirectoryA
RtlUnwind
SetUnhandledExceptionFilter
TerminateThread
lstrlenA

user32

CharUpperBuffA

crtdll

_itoa
__GetMainArgs
exit
raise
signal
strchr

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 728B - Virtual size: 728B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE