25e30db1d905eefb0ad74eebdfc01a37_JaffaCakes118 | Triage

Sharing

General

Target

25e30db1d905eefb0ad74eebdfc01a37_JaffaCakes118
Size

39KB
MD5

25e30db1d905eefb0ad74eebdfc01a37
SHA1

4bdc70ab859cfd8bdedb4f3f9b5bf96dd4661af2
SHA256

8e56e8591cbd4268cb9f4d352296c0240f0562a75ecacd33b255dd3ef8bff9b6
SHA512

e70b04fd006bcf72a42d34b4f69406c062c23d9e88794ce1d77637fba56b872ea728f0c25768a86c13b938c35aa5433c6f30754c3e3df70c956c47fa2f5addd0
SSDEEP

384:AAJIKYrFCPyN9nQry+24eyk+xYx0k0sqUdQxbogEQbjWN6Mh1Xtvk09Snwb832Zx:veKYrF6yPjR4B9Ydsz1gxL9SnzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25e30db1d905eefb0ad74eebdfc01a37_JaffaCakes118

Files

25e30db1d905eefb0ad74eebdfc01a37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5bd9edfa66d8b7dcac4d29ea3df4e1c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
WaitCommEvent
EnumCalendarInfoA
IsBadWritePtr
FindFirstFileA
GetStartupInfoA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ