4b3412c5858d28299ffaaaae8c015792_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b3412c5858d28299ffaaaae8c015792_JaffaCakes118
Size

72KB
MD5

4b3412c5858d28299ffaaaae8c015792
SHA1

64db98cf5d759d7e35dc88374ae0df1e7262cd9d
SHA256

8c9ca1b606536daf3174a81da3fa6be97b2286e55d9cd797614532371ca38a09
SHA512

04e28d37f2d8f771ff06b79bc462ed6610adafcd23eebec2c8882b4cc842e203691143f33a8306bc14737a0ece1da02a151c7b6bd13b6aa2ff1d4ae638bb77f6
SSDEEP

768:Dkh/y3FCaAaoe0P1ou0EhRV8/tFdL0DOVXkleYxJk3E2m9F22bOVBx2eo0f0zOgV:NP2xhg9L2leYzkUd8P/o7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b3412c5858d28299ffaaaae8c015792_JaffaCakes118

Files

4b3412c5858d28299ffaaaae8c015792_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8912d690046fc0a5650eaa20d89725ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetModuleHandleA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncat
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ