3198879c98ad8d01023a0e04f56f96f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3198879c98ad8d01023a0e04f56f96f9_JaffaCakes118
Size

53KB
MD5

3198879c98ad8d01023a0e04f56f96f9
SHA1

12887b08d606ca37232c740524f132c042dff29e
SHA256

df5c7dd97380b6d8909aca2fafbaada5e2104d386023cef0f44e360cecf21f1c
SHA512

1df235c2e22006a3e6b5661f0af0aed9b72d910073f30670977820307ae2c6e926d19211dc6d2c1282fbeef7950b85642e8cd29f7308e79db4671503939aadb1
SSDEEP

1536:sOAZ5ltLpJz0mgh1cj4BgM5ECmLrOEMeB:sOeP0my1cjIj5ECYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3198879c98ad8d01023a0e04f56f96f9_JaffaCakes118

Files

3198879c98ad8d01023a0e04f56f96f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

86388c21b73d0f037682dd3aff55c96e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
GlobalFree
lstrcatA
GetCommandLineA
GetVersionExA
CreateEventA
FreeLibrary
LocalAlloc
CloseHandle
GetStartupInfoA
GetFileSize
GetStdHandle
lstrcpyA
LocalFree
GetTickCount
lstrlenA

msvcrt

__CxxFrameHandler
_adjust_fdiv
__set_app_type
_controlfp
__getmainargs
memmove
_acmdln
exit
_exit
wcschr

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 978B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ