4c84f5c0128933827bd0d03201e11b7a_JaffaCakes118 | Triage

Sharing

General

Target

4c84f5c0128933827bd0d03201e11b7a_JaffaCakes118
Size

131KB
MD5

4c84f5c0128933827bd0d03201e11b7a
SHA1

3e0de77f2caef6aa6730e2ffd902400dac1075d3
SHA256

e5cce0910e605bc622572df12d69634d00a451262d35dc3a6c40342b6a0ac123
SHA512

7ff631961bf976d77e25af7d1c792c195a0423fe2d7a3d22d73fb860fa3e8244c9970fbf5dba83cb81136f027f49f61e493e4ed961a3ba84ba272d37f6df095c
SSDEEP

3072:tfPexYaZCOdtftlKKBfXEh+FL6Ay6EZeoHG6lkkRoXeWg:tPexYotmKBfss6haoHG2Bx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c84f5c0128933827bd0d03201e11b7a_JaffaCakes118

Files

4c84f5c0128933827bd0d03201e11b7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

834b458a524a029cf8d5e4bdcd0e9e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetThreadSelectorEntry
GetCurrentDirectoryA
GetConsoleScreenBufferInfo
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ