29bea756d43581de696ea584a96a2e4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bea756d43581de696ea584a96a2e4d_JaffaCakes118
Size

108KB
MD5

29bea756d43581de696ea584a96a2e4d
SHA1

eb66eb1247a858313f54548cb6bd8a2acb8cb336
SHA256

1f3e41ffd2cd8428a62975703c7a092a514de6a4be35ccfa0ce34b22197045e8
SHA512

dfb98875d39ce01a16d5b3c5186018724ecda03461cb164c43f9f9d4ae73af7f13c7e0cd7525f87cef9c2e9404b988e5209fad3145cb6e4bd649145caea1e923
SSDEEP

3072:CzGjJZZmaXQYB7HMYwOLjzx3uIv0TppxxJpwqScj96:CzmmbG7jzxEthJfj96

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bea756d43581de696ea584a96a2e4d_JaffaCakes118

Files

29bea756d43581de696ea584a96a2e4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1845f3266ac7d5e52e86722771ae75b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
LocalUnlock
VirtualProtectEx
InterlockedCompareExchange
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ