5c9168a902f9a36a5ffd6ad1efe55310_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c9168a902f9a36a5ffd6ad1efe55310_JaffaCakes118
Size

150KB
MD5

5c9168a902f9a36a5ffd6ad1efe55310
SHA1

e3b6472bdc6daacef1aa245c1cd35833294c5a2c
SHA256

cf190b86f27777f6a34c5744ea81073e034bf54bab2ceed41a4f2236f79b2fb5
SHA512

f8d4cb824f4236f02046ee20a4d5703df9410c03eebff4ccb51dfd6237ff4b9f98dbf1227b284f9934f745725be9cf5c6b249b942a163786e2c8286b7f633b21
SSDEEP

3072:z/QHD19btw5u+7CIMAmPOajZwLJQT2SJx6Kwf23yfVjOJWy3/op+YNEXOxnF:z/QHDVau0CI3klwLi1xZL3SjlyvofcO7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c9168a902f9a36a5ffd6ad1efe55310_JaffaCakes118

Files

5c9168a902f9a36a5ffd6ad1efe55310_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6059387e1d2868883d717628d986056c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
BuildCommDCBA
FindClose
TransmitCommChar
ReadProcessMemory
GetThreadTimes
GetConsoleCursorInfo
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ