4de6a2c72e75b733d2645311a63ef5b2_JaffaCakes118 | Triage

Sharing

General

Target

4de6a2c72e75b733d2645311a63ef5b2_JaffaCakes118
Size

21KB
MD5

4de6a2c72e75b733d2645311a63ef5b2
SHA1

e09473e0092da13ce00fa358d41697b4e63607ca
SHA256

499cb05559ee5d2d360da3bc27c4fee2228cf3f678db16bb5fbf1993e5eb8042
SHA512

21486aaa9e24baffeba5801534d4f527ea3076c5cbf4ddaa4fee81c9df6c774e2225379ccf0b6c1e4a9504a269168844bcc60d4457c8235286fd30eac490aa97
SSDEEP

192:alxzIavX+0k6HLWcVWkF+iaQiz4eCCib8q:alxEaGwrWcVWEyCCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4de6a2c72e75b733d2645311a63ef5b2_JaffaCakes118

Files

4de6a2c72e75b733d2645311a63ef5b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d5a3278c926456a7598cec7d385dff6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_initterm
__setusermatherr
_controlfp
_exit
_acmdln
exit
_XcptFilter
_except_handler3
__set_app_type

kernel32

GetStartupInfoA
GetModuleHandleA
Sleep
GetModuleFileNameA
CreateProcessA

user32

PostQuitMessage
DispatchMessageA
PeekMessageA
CreateWindowExA
RegisterClassExA
DefWindowProcA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE