4d09d31642941e557d10c3af20d0ecf1_JaffaCakes118 | Triage

Sharing

General

Target

4d09d31642941e557d10c3af20d0ecf1_JaffaCakes118
Size

34KB
MD5

4d09d31642941e557d10c3af20d0ecf1
SHA1

895e32e176425b231d1e59f887b15e1e78ff3875
SHA256

a186267086ea556efe666000865a2b89454a498303e291d6c0bb8bc70b6182ef
SHA512

b1b2c2aec8e7c5adddc0dde8026d3d27e396bcb76d24051416e189700529c5411448741c8339eaaec09fef8fb3624c45294cceda52a01925f33f4d86b9187924
SSDEEP

768:UmXDH1yVy2vSmUKL6fimyEERm+EPe4jGsh48F5lxYgd7OAO:NDH1J2vS+L6fimyEsmqKGNCvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d09d31642941e557d10c3af20d0ecf1_JaffaCakes118

Files

4d09d31642941e557d10c3af20d0ecf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c757a2c5e5f35b7457ae1b070434f09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateFileA
GetStartupInfoA
GetFileSize
ReadFile
GetModuleFileNameA
GetProcAddress
CloseHandle

msvcrt

__setusermatherr
malloc
free
realloc
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ