46224fb65363e633a0973b2d75a85334_JaffaCakes118 | Triage

Sharing

General

Target

46224fb65363e633a0973b2d75a85334_JaffaCakes118
Size

84KB
MD5

46224fb65363e633a0973b2d75a85334
SHA1

c753f3e9fc7c51f1d052ed364446dca8f2b467b9
SHA256

e4171e87bb24f5bd8d79c0bb68a5445e3462a71f48c193c692efe66e4d2a081d
SHA512

845c6294017588102bb37c0a205da5cc6cafa9d1c7535b3e4714150abc160e2cbc8acf81ab774c23ecb386ca5350e02d02389c4a14ffabce146517e9378c5c8e
SSDEEP

1536:mb9auki8nOOPxMDV4MhVgRbhSRsiJJMevd:mbozbhaVhShtiFvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46224fb65363e633a0973b2d75a85334_JaffaCakes118

Files

46224fb65363e633a0973b2d75a85334_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8fabd7ca68397e23a991961c2308723

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_exit
fopen
strchr
exit
_adjust_fdiv
realloc
_except_handler3
fwrite
_initterm
cos
strcmp
atoi
__p__commode
__p__fmode
_acmdln
fprintf
malloc
abort
__setusermatherr
free
fclose
_XcptFilter

kernel32

GetStartupInfoA
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ