4718fcc3de50cb7d3ea2b0ce216d8ab6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4718fcc3de50cb7d3ea2b0ce216d8ab6_JaffaCakes118
Size

98KB
MD5

4718fcc3de50cb7d3ea2b0ce216d8ab6
SHA1

8a9cd539c5447cddb291523339c84adfbd22db67
SHA256

9c005601c311292f8780f5bd076e227ca55bc1ca752f67d709c90a609f045de0
SHA512

011df1d99e9c840b1562f5cc6bd61ba4096b4d66a9ff412d52afd2b8c0f9c8a717e6d0f0ad0aead41770946af245a871780f57df312a7ee3beb6af2f54ee48c2
SSDEEP

1536:b9U4dNkvuRagp+qoGAJqLf7bFOttp0+iLRuTRHbfkYg3kbG2i19afqoNVbQyBH0+:JFNkrgp+qEULf7bGWeRrTg3kbY1dkfyc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4718fcc3de50cb7d3ea2b0ce216d8ab6_JaffaCakes118

Files

4718fcc3de50cb7d3ea2b0ce216d8ab6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03932290462ddb6a5e9e667a7c26e97e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
GetTapeStatus
SetProcessPriorityBoost
Heap32ListFirst
LocalAlloc
MoveFileExA
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ