5c38ec6f1c43c1f05f0772db2514ff1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c38ec6f1c43c1f05f0772db2514ff1b_JaffaCakes118
Size

140KB
MD5

5c38ec6f1c43c1f05f0772db2514ff1b
SHA1

27d1f6a12b978c7bc9fed71ca0a0dc6cc2c95bed
SHA256

026289a7e0526a33ac976bacdd94c6dd887ff7c9cebbbc1a9e0b5f6fd190b4bb
SHA512

2655d946debebc9a8b532f66c2eaf8cb2d02eea8e58d332dbd688b904da72d72dc35be467c2c938ec2bb2671b4e2000d3914fbe93ab05844704a888620775c5e
SSDEEP

3072:Q0jZGamIjWmqbnhXm28xgYv2I5c2wK7AjGZ:XGfnhXmP7sjK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c38ec6f1c43c1f05f0772db2514ff1b_JaffaCakes118

Files

5c38ec6f1c43c1f05f0772db2514ff1b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e9dc5a28a1d12f9e39ad4b22cb619338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
GetFileTime
SetLastError
GetCommandLineA
CloseHandle
HeapCreate
GetVersion
HeapAlloc
GetModuleHandleW
InitializeCriticalSection
GetStartupInfoA
TerminateProcess
GetModuleHandleA
FlushFileBuffers
SetFilePointer

msvcrt

__getmainargs
exit
_isctype
_acmdln
_initterm
_setjmp3
_XcptFilter
_ftime64
_cexit
__setusermatherr
freopen
_atodbl
_controlfp
_except_handler3
memcpy
__p__fmode
mktime
asin
_exit
__set_app_type
__p__commode
system
_wfindfirst
_adjust_fdiv
_cwprintf

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ