4c675af4b3811b58e7a2db2dd335ef30_JaffaCakes118 | Triage

Sharing

General

Target

4c675af4b3811b58e7a2db2dd335ef30_JaffaCakes118
Size

98KB
MD5

4c675af4b3811b58e7a2db2dd335ef30
SHA1

7ebdce879dbe7a1019b7cf72739fcdd843c423fa
SHA256

69cb1f919fb21cf78644905209ded835e5ce948743f628a12483c3c057a2b2b6
SHA512

2c20ce0c99a8f284211b51f833f529d241bc5b9f51dec0616eeaa3269728169d7f24e648b7593ce48ba743817eadf565a7fbeec8ecff3a56523b9ade645882a5
SSDEEP

3072:vyPds7kdQqjJygnunaa52xFIiEzcgLPe3NgFh:v6BdQeygnKaa5otEzcgLPONgn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c675af4b3811b58e7a2db2dd335ef30_JaffaCakes118

Files

4c675af4b3811b58e7a2db2dd335ef30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6418a7582ff61950be3a6f4e7be70e6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fseek
__set_app_type
free
exit
printf
_acmdln
fopen
_initterm
strcmp
fclose
fread
sin
strlen
__getmainargs
_except_handler3
_XcptFilter
_onexit
_exit
__setusermatherr
fwrite
_adjust_fdiv
malloc

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ