35e1a1137307bffc43d64beb8e0ac47e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35e1a1137307bffc43d64beb8e0ac47e_JaffaCakes118
Size

210KB
MD5

35e1a1137307bffc43d64beb8e0ac47e
SHA1

882f819fcb2470ea5b927a70a449cd29660c52e0
SHA256

b354d8519450b9393588414aecaf6e1ca5619d537f2eb4c177272afffd8d7c98
SHA512

c389810ce14be5770797a0242948b5637fbb6859679f8da1abd337da505fff5dbcfcbd314905b8f269b5f179a26882b0303efec24f9a82e012e091afa8a4f322
SSDEEP

3072:ydL+uRNST4Cc9hjHfQ8PpzyehZ80XlNd1Env2qkIZ2Ai1I646Xbhl3yefG8:KLj/DTzphq01ynOn0wP46rD3yab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35e1a1137307bffc43d64beb8e0ac47e_JaffaCakes118

Files

35e1a1137307bffc43d64beb8e0ac47e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3da7db70825beceac5b42d64da5ffa5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetModuleHandleA
GetStartupInfoA

user32

CopyImage

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ