359034b2cc32d0504e11e3d62eea9c32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

359034b2cc32d0504e11e3d62eea9c32_JaffaCakes118
Size

126KB
MD5

359034b2cc32d0504e11e3d62eea9c32
SHA1

c50c77ec3e300ca94b5c1866d60a952623379e11
SHA256

021f1c8c8ff25dd6b1fc2a4234f6ebbf12422b26d75981016573b25a87ca1c9a
SHA512

2a861097d93da87485fdaffbd9877bc7f6847ab19727996d235a0823e66e9f7b0d25c01c38b317102fe15b0e962667d83e192ce7e12524195c5b8582713cdb13
SSDEEP

3072:ayVTaeDBdpJMcMn04V597V59ROqrOqPeJiGl7SkS9T+kFhz5IWGxC:ayEeVd/LMn04V597V59R7r7PeJXl7SkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
359034b2cc32d0504e11e3d62eea9c32_JaffaCakes118

Files

359034b2cc32d0504e11e3d62eea9c32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04493afa36af887eab6c4ae8fe12ed3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
FindClose
MulDiv
GetLargestConsoleWindowSize
CreateRemoteThread
LoadLibraryA
SetTapePosition
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ