2da8af0ae0590ac9ccece2df0c167037_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2da8af0ae0590ac9ccece2df0c167037_JaffaCakes118
Size

95KB
MD5

2da8af0ae0590ac9ccece2df0c167037
SHA1

776ddb176de4aedfbd72ffd6aa14c628445eeb70
SHA256

ecdb6196faf9bd028358db22e4c2b2875e92237e4cd2feebdcc6e931082278cc
SHA512

a95f7cf3da2c09f9ae67888c28aec5c6b1ebddc82b8312d014b5471d0691923745193ac994de5e3ff3df37dd53301da393bf85dd8b79016c5ed22b5ff2145a3d
SSDEEP

1536:V9+0uGC6OBT5ppffohtwFEB5FD020Z2l5CU5nNMHv6nPnzgJvYvYsC22lOqD6m3:V9+0PC6yT5MXd5020Ql5VNMCPzdwsCRo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2da8af0ae0590ac9ccece2df0c167037_JaffaCakes118

Files

2da8af0ae0590ac9ccece2df0c167037_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c68a5f7c09a3a1a635ec65492800a4e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_adjust_fdiv
sin
fclose
fread
exit
_onexit
free
_initterm
fopen
_XcptFilter
_exit
__set_app_type
_except_handler3
strlen
printf
malloc
strcmp
fwrite
_acmdln
__setusermatherr
fseek

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ