5baf5dccf065b26c7afff8f3e5fa3f0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5baf5dccf065b26c7afff8f3e5fa3f0a_JaffaCakes118
Size

16KB
MD5

5baf5dccf065b26c7afff8f3e5fa3f0a
SHA1

bf2f23b183d5417676c78de83ecaf5b2513222ed
SHA256

9b6403ad3bfa49dc9abde3348fe34f2941eeb246622c408198c2210f0e25c0be
SHA512

7d6cc5a94a1d62e25924c18d9e8f6870cb92dea676fe865671b843413d56d1326ede0a3bc655fb4c2f3dd806f02000caa69b9f632c2ac0930de06173d3cda2b8
SSDEEP

384:bvSqSis9QlcffyqWesFiqis9QlcffyqGes:bq3isKl4qh9isKl4qR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5baf5dccf065b26c7afff8f3e5fa3f0a_JaffaCakes118

Files

5baf5dccf065b26c7afff8f3e5fa3f0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

239e4846df996659ac8b9a8e96b1cced

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr71

_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
__p__commode
memset

kernel32

GetModuleHandleA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
ExitProcess
GetStartupInfoA

Sections

.text
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE