257f37fa9e31886d0fe8c5d6dd255ba2_JaffaCakes118 | Triage

Sharing

General

Target

257f37fa9e31886d0fe8c5d6dd255ba2_JaffaCakes118
Size

36KB
MD5

257f37fa9e31886d0fe8c5d6dd255ba2
SHA1

2976dd8e81d9be3e2d0af0003bf5ebb6d87d3990
SHA256

1a4f9b838901f428d222d338ec8a842b78dd77f10ca38098ef606a67abc99457
SHA512

986318d8eec6642bc142fc4b34bd39be7036f755cd7b95d8842ec63c0a373bb58c325be8d20484abfbb3e7490a171e2f19b8a73f1597c8c4cf46fcdb3087f48d
SSDEEP

768:Dus63B38wdeROvDJoyoXG50V//CxtKzl7ea:DKBddeKdoXW5cnCxtalia

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257f37fa9e31886d0fe8c5d6dd255ba2_JaffaCakes118

Files

257f37fa9e31886d0fe8c5d6dd255ba2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d47acdf8125540c5b494e7463de8dff8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
CreateEventA
CreateDirectoryExA
GlobalGetAtomNameA
FreeLibraryAndExitThread
SetDefaultCommConfigA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ