35baede426d0869f1855a946a48b7d2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35baede426d0869f1855a946a48b7d2b_JaffaCakes118
Size

159KB
MD5

35baede426d0869f1855a946a48b7d2b
SHA1

f4cef29d2ad49894e6eef9deb565bc37f48a17c5
SHA256

e344d0df9b8e90fee78306d0a615632f2563a8af3be4a08332c123ea149226dc
SHA512

9dde7f393b8299c50a47252b62f6923fbd20aa1321f339113da69def1ae220b4de940951c92dc1d6f63f82559925d8570e7f2aa8d0d6505e1c256da2f8290163
SSDEEP

3072:THd1GfzcmIhOM20yZsZClnyWFk7jGoq4oX6FDblL11jc7MS2yOfsGyj+MK0Q8X/a:THdSYhOMpyW8yWFmDN/3fsGyKMfQ8v8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35baede426d0869f1855a946a48b7d2b_JaffaCakes118

Files

35baede426d0869f1855a946a48b7d2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c86d9ab36fd0c477dc301b263a0b0533

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

CreateEventA
SetThreadExecutionState
HeapReAlloc
LoadLibraryExA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ