4a844591f5d68f163c5a511f67d3fee1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a844591f5d68f163c5a511f67d3fee1_JaffaCakes118
Size

771KB
MD5

4a844591f5d68f163c5a511f67d3fee1
SHA1

051aca942a861fd51b9fb7a4dab59ca84561395c
SHA256

5aa28b31d7e5aa2658ac5372dff31b5851e1ac91a3e7902eba5eb7b7b4b1cdad
SHA512

792843d477647112e2acc56df11652f8d7e95044b750f800fabcf4d1647728a1d9bdc0ada850ba2eb407beb42de3f8d886fbc7dbdd4fd62a54ab391dfc2510ba
SSDEEP

12288:VWdQOLR7MoHXIFth8RJFDJOCXMEe8qIEBvhV7VjVVCdIo5jW6aEfM:VWdFR7MoHakJOCAIP5jxaf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a844591f5d68f163c5a511f67d3fee1_JaffaCakes118

Files

4a844591f5d68f163c5a511f67d3fee1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c720f68be19da4571df323074ef4e690

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
VirtualLock
DeleteFileA
IsBadReadPtr
EndUpdateResourceA
GetSystemTimeAsFileTime
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ