449297912a18168cbb5f5aa21efe7b89_JaffaCakes118 | Triage

Sharing

General

Target

449297912a18168cbb5f5aa21efe7b89_JaffaCakes118
Size

28KB
MD5

449297912a18168cbb5f5aa21efe7b89
SHA1

b94d21a4ab92af6329a072a43521f6226cc2b823
SHA256

15e32b4d82a374af69c582d52b0b8140da3a4546792019affab741bddce025eb
SHA512

4914b9c64c6f78f9eec221be84ec260dc91e4b900c13adfcef840ba24e4756e2373256035a339752f5b52c093bf208b7e37890f2edf3b028d919e67fac7577d0
SSDEEP

768:KREkgo05V1RUPiILa4ZByNWYB5Hsd6pjbU:KREkgo0DXYiILaeBKWYDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
449297912a18168cbb5f5aa21efe7b89_JaffaCakes118

Files

449297912a18168cbb5f5aa21efe7b89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ec267aeb750cf289fced488f24900cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
SetCommTimeouts
DisableThreadLibraryCalls
Heap32ListFirst
OpenFileMappingA
OpenSemaphoreA
WaitCommEvent
PostQueuedCompletionStatus
GetStartupInfoA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ