48e8f5274b46b9020f252b6d3ab3793f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e8f5274b46b9020f252b6d3ab3793f_JaffaCakes118
Size

71KB
MD5

48e8f5274b46b9020f252b6d3ab3793f
SHA1

4bdc17afd14d8b29825a8c49d37be33e8060dbe5
SHA256

2cf4ce1e64063de9da9b0c0a3cba3c6be6e6be5747ebed48d2a1dd97a971e7cb
SHA512

e18e23ac70ab742b815b00993314b4b604b5faf1124a2baf54d54f7d1d85b29a28a38815241b4c429d99dce383f540245bc3991b93197417bc490cbed8f3c5f8
SSDEEP

1536:2lqObZPogFoBZ5jRGRwKUOGtt9+RDg2+fEhAKxayc641YICuwpmUH:2lqObZ32B1J9T9+JFKKYyu1Y7ukTH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e8f5274b46b9020f252b6d3ab3793f_JaffaCakes118

Files

48e8f5274b46b9020f252b6d3ab3793f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2bbdbd8f0bec6865977bd7af54567f77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
qsort
__setusermatherr
__p__fmode
exit
_initterm
_adjust_fdiv
__set_app_type
__getmainargs
free
_XcptFilter
cos
malloc
_except_handler3
_exit
_acmdln

kernel32

VirtualProtect
GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ