483d85377dc9e8d2595144cbec2d75e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

483d85377dc9e8d2595144cbec2d75e6_JaffaCakes118
Size

73KB
MD5

483d85377dc9e8d2595144cbec2d75e6
SHA1

6c934dc5f62bce006570373fc07898eb1cff82f9
SHA256

a046abf44602713a531d5f23919849992d0df5ca208e7b8f9c587f303f01c99c
SHA512

9c33ed59b675da8883e14757d485ace5c16b904e8168b5c37add7bcb841f229c70d356e93d983217f09c4b5708385f062f0ce9bca31394399f97a2a828ca7681
SSDEEP

1536:XkKrY9ZSpHROT6P/Su3Fy+vDMa9h/z8bt3vigbuUIv7d:XNrqqxOT6P/x3EsDMaD8bU2Iv7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483d85377dc9e8d2595144cbec2d75e6_JaffaCakes118

Files

483d85377dc9e8d2595144cbec2d75e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

37bb5fae4dfcacecb3ca485c46f64434

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fwrite
strlen
fclose
strcmp
fseek
_exit
exit
malloc
_adjust_fdiv
fopen
printf
__getmainargs
__set_app_type
__setusermatherr
_XcptFilter
_except_handler3
free
sin
fread
_acmdln
_initterm
_onexit

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ