4e0be95f7f66fd10e79ac1be639d52ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e0be95f7f66fd10e79ac1be639d52ff_JaffaCakes118
Size

92KB
MD5

4e0be95f7f66fd10e79ac1be639d52ff
SHA1

57837bbaf43b6585c58d0e5268628e387fba9ed1
SHA256

05b68bf5c535448ae183e0fdcf1a025e5fc8663e6be3b1b571545430cf34e847
SHA512

d4763516c98a1384d0cfd8583a5ddca77a6276d1836874c9a8326e4c99b5d33fc22734ea30938631333565122e271cf251fa412a50a2867248f3638df3faad0c
SSDEEP

1536:1uPO6phiovkZJZJzmzplf7SY2pUjJ3m1isWULe6t2P47lVoGt:gVhsZtzQlj31cdxC47X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e0be95f7f66fd10e79ac1be639d52ff_JaffaCakes118

Files

4e0be95f7f66fd10e79ac1be639d52ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3faed0da163346d880358d26a594e00a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_initterm
fseek
_acmdln
__set_app_type
fread
_onexit
strlen
_except_handler3
__getmainargs
exit
_XcptFilter
_adjust_fdiv
printf
free
fopen
fclose
sin
malloc
fwrite
__setusermatherr
strcmp
_exit

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ