5dd3f25699ff861174d2f8a88f2f8277_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5dd3f25699ff861174d2f8a88f2f8277_JaffaCakes118
Size

333KB
MD5

5dd3f25699ff861174d2f8a88f2f8277
SHA1

e553b6dfcf113844af632cdba8cf76bcb7496a09
SHA256

43e771e6701cbaf117e5fd3b0b42a94a46fc02f10c8f6f77489cc7b7461f92dd
SHA512

9fc59cc44f334d18080316aabb2defb01f233643be2c72ea80e5ab4452170e637bf1364bde9aed9d6b71d8dcb47e0932dfd7cbebcbe95bd95a964d5af5cfd5bb
SSDEEP

6144:GuWYzl4oct3tSgp5Ql4Np7HRPohK+BMpISjKW7g1rQnDyt:AYzatz4+PSI+ypIP1rMa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dd3f25699ff861174d2f8a88f2f8277_JaffaCakes118

Files

5dd3f25699ff861174d2f8a88f2f8277_JaffaCakes118
.exe windows:4 windows x86 arch:x86

424859bc2ad24db7b0038f2134faabcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
cos
malloc
signal
strcmp
tan

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 400B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE