4a9945731ee3466a0602095ab48efe92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a9945731ee3466a0602095ab48efe92_JaffaCakes118
Size

22KB
MD5

4a9945731ee3466a0602095ab48efe92
SHA1

ab28ca30fafc6edce25732529609f3848bc7279c
SHA256

a7333c0bcb98cca89227ed45a85138610bc3650030d6953f71f000a6d997ef20
SHA512

2b003dc61be63c87f88261ce0aa2a6ec9b70b7b11befa8718bbb6091ad6b8c427cf98578082ba38cda593d1c2f9dffdad5cd2154d09af87a0d924048385a5cd0
SSDEEP

192:v2Ngt1QRfr6R6g/n9P1oynGoHiT2Q9Eq5mH4sL:v2NyYrZSnp1dHiT2Q9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a9945731ee3466a0602095ab48efe92_JaffaCakes118

Files

4a9945731ee3466a0602095ab48efe92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26388d99f31b2e42f95fc2e368bdabb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__p__commode
strncat

kernel32

GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ