4b585a906cf67870569631654a3cffd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b585a906cf67870569631654a3cffd3_JaffaCakes118
Size

232KB
MD5

4b585a906cf67870569631654a3cffd3
SHA1

3612010816ab292ec59b032f345259ec76d5cd08
SHA256

95e16509b06d56339d01c481649a1cb54df600063cbd19ba5f79513911ed9734
SHA512

76415526a25c69c70998c1140f9497ea1493424ff954f01313548d9c21c9d691013fd9ac2aa6ac611172db2ed756945c5494b8459e0ed47967c6e943ed7c1511
SSDEEP

6144:f/zZwNbGQyOuzQFD7peNXdDA/BzKWj1fAnmLuXTN:f7a1G6z0NNOXjmmLih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b585a906cf67870569631654a3cffd3_JaffaCakes118

Files

4b585a906cf67870569631654a3cffd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7ea9cb6d9eb282a7cd492941b4c46d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GlobalUnlock
InterlockedExchange
CallNamedPipeA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ