438c8c2ac8c31339f078c6783dd91c28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

438c8c2ac8c31339f078c6783dd91c28_JaffaCakes118
Size

45KB
MD5

438c8c2ac8c31339f078c6783dd91c28
SHA1

3441b3218e9e9b788dbdd30e263eebf812ff9a9b
SHA256

98e9cdbf5fce9ad0c99d8f6658ad09a74b2d6f01774003eaf1816024b2603752
SHA512

cc1a0a5f8e0ec0257b9be1282359af45b6148ccf4d30c2abaa7f5b9db10056dece70bdcaecad5edd731bc3f0d0c557c60f9ec8689568b19d836a5c0a4a10b247
SSDEEP

768:MG0D8P7KycD3/f3sX+sMvM/xEpz1ZyLCSdwEYfoTas3bfDWc+Jy6FwNN2LEdL:Mr4P7KHD37vMJY1ZUCyuI+nFYN2qL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
438c8c2ac8c31339f078c6783dd91c28_JaffaCakes118

Files

438c8c2ac8c31339f078c6783dd91c28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9253fa0bf23934d087c6b7ca3e7886f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetModuleHandleA
GetStartupInfoA

msvcrt

calloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
memset
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm

Sections

.rdata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ