59fe1fd6e26f7b65c79a2c2ec22ebce8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59fe1fd6e26f7b65c79a2c2ec22ebce8_JaffaCakes118
Size

135KB
MD5

59fe1fd6e26f7b65c79a2c2ec22ebce8
SHA1

61380f33fc2bab5c375227b02391a255ac2b2f9d
SHA256

be8c88870efb666e055130b3933ecf47e83547db6e15d6e4f7a1cf2a33bd2528
SHA512

ffbe5e68fbccd302cca990e90a366b1bd7cb78905bddb5e9d3027ffcf14af3ebcc4eb287d7f34f0e195a55342058862b097408274549f2aaf987c5c68bab06f3
SSDEEP

3072:1H0rBzcn9Ib6sM832iPJxdHOOGo1JrT+oRkiWjzp+HtLu36Y5jk4WD2:1xriP/dHPHJ2oRIz8Hozn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59fe1fd6e26f7b65c79a2c2ec22ebce8_JaffaCakes118

Files

59fe1fd6e26f7b65c79a2c2ec22ebce8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b42e9fa891047ebbec20c0f9f6aa9317

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
VirtualQuery
GetOverlappedResult
VirtualQueryEx
GetDiskFreeSpaceA
UnlockFileEx
DisableThreadLibraryCalls
TerminateThread
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ