4c1c67289a4f203a62cae727e30c974c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c1c67289a4f203a62cae727e30c974c_JaffaCakes118
Size

183KB
MD5

4c1c67289a4f203a62cae727e30c974c
SHA1

130c58d1a0b2085fbb2b75ae032133ef4df70a5d
SHA256

e0ce25732e411782d7ca8ed3e8816c74a4c0f0959f6d5fd52e59d03057fe9457
SHA512

20b6796a94e44135434399ec62396f9cd21afff1b96bb1d695663c89a97df09b8f9cbb6989084398d6ef98c5bd1ecfd35b4e6f2a164afdcebcdfac9c7bdda7d6
SSDEEP

3072:KoQ+V7OsFQ8p4WOGhj2o1uhknLvOiKwgj8kqwBlsVs:Kf+5Q8JTZt1uGLqwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c1c67289a4f203a62cae727e30c974c_JaffaCakes118

Files

4c1c67289a4f203a62cae727e30c974c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cc8c667b7a3da7a0f5dc89bf2c877003

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

log10
__set_app_type
_acmdln
_except_handler3
_XcptFilter
__setusermatherr
_adjust_fdiv
__getmainargs
_initterm
exit
__p__commode
__p__fmode

kernel32

GetModuleHandleA
VirtualProtect
GetStartupInfoA

user32

FindWindowA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ