363a15e934b3a7d61351948aefd04942_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

363a15e934b3a7d61351948aefd04942_JaffaCakes118
Size

121KB
MD5

363a15e934b3a7d61351948aefd04942
SHA1

90db1ae36a14a55c804aff53ca760326e60a9266
SHA256

f909f7fab0682f397e7444c429760b9c31206935fca2d610bb0dcaf3e9888b4e
SHA512

fa19999c33cb0f4c97f49ef85bee12a88f0c1950ec0b1596a1d6fb1052a4502bd367837e72720304c29a5772fb0e5825a5de11dae2a2b50f9d71fab09a7e33a7
SSDEEP

3072:hFmBXJsagh66nTUB0InGrruv1aYYnHCqF:hABZsJh6G4vGrrmQBF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
363a15e934b3a7d61351948aefd04942_JaffaCakes118

Files

363a15e934b3a7d61351948aefd04942_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a402586b3fb584ceea0deb920268c427

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
CreateDirectoryExA
CreateDirectoryA
GetPriorityClass
PeekConsoleInputA
InterlockedCompareExchange
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ