5a9445f1ae4ce2e6395c392c72d23c5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a9445f1ae4ce2e6395c392c72d23c5c_JaffaCakes118
Size

16KB
MD5

5a9445f1ae4ce2e6395c392c72d23c5c
SHA1

eec90182208f4ccc4cc5a98260850b73b76b9375
SHA256

8348f18538286e9f3226e2876e78840e4528a456598cb772297a77ad23963d42
SHA512

a251aa8b98c367e6fdf79cf8ed40b5fa93a7b87086fc85dc1d99123f84c9cbbbce1696a005397309a14d11b6c4d6822203a29a9e6f72164eea16a53f288348f6
SSDEEP

384:bvSeGis9Qlcffyq2esFiqis9QlcffyqGes:bq3isKl4qJ9isKl4qR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a9445f1ae4ce2e6395c392c72d23c5c_JaffaCakes118

Files

5a9445f1ae4ce2e6395c392c72d23c5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

239e4846df996659ac8b9a8e96b1cced

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
__p__commode
memset

kernel32

GetModuleHandleA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
ExitProcess
GetStartupInfoA

Sections

.text
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE