5c1f05cd38799b0cf5e1be64c288a04b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c1f05cd38799b0cf5e1be64c288a04b_JaffaCakes118
Size

77KB
MD5

5c1f05cd38799b0cf5e1be64c288a04b
SHA1

6547eb79e61917188c97f5cb10d7541a9f17d805
SHA256

5bb87f9fd60c4c3c88a3b96b98ad76087d5943367e51425cabcd28ea32587d55
SHA512

8e1c949b471fa9fc990613007fb4d47e5d8e1e4f970c87d1c1282fa408365d9c39918ea4841a99df8cce8877eee9e65d9f6ae61c6a21c1ff4281c453a5d8356a
SSDEEP

1536:bCjdlG79rBhjmJp9txir8dfJT1AzQ3kORVJeNBOIj+DqAS9oAiN:CdlG1jmJtkrYRTk6kOlOBOIj+G37iN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c1f05cd38799b0cf5e1be64c288a04b_JaffaCakes118

Files

5c1f05cd38799b0cf5e1be64c288a04b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfdb5df84175cf64f2afc2d038cf86db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
malloc
_chmod
__set_app_type
free
__p__fmode
__setusermatherr
_exit
__p__commode
isxdigit
_except_handler3
_mktemp
memcpy
_XcptFilter
_acmdln
__getmainargs
vsprintf
cos
_initterm
exit
_c_exit
sscanf

kernel32

GetModuleHandleA
VirtualProtect
GetStartupInfoA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ