5c92ad4e1665f231e103f05b1621ec98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c92ad4e1665f231e103f05b1621ec98_JaffaCakes118
Size

243KB
MD5

5c92ad4e1665f231e103f05b1621ec98
SHA1

3f5e0eac60fe258dc6de2a6bd5b482cb84925360
SHA256

77222d8b9f249b900e8d0597377315ba4311cbae0c298ae217141bd34460fcc1
SHA512

a356e8ed7a12633e25c172c9c20e8ed51ef9710aa4e62d9b8bae193b2c276f6b3ba0cf9495b5799d5d32179930fbf4041ba2ab1d94763f47bacef246899a2ffa
SSDEEP

3072:qFmuFwGEDRHo3bN3pU1/LllhtwVOPZETk:qFmowGORHybTU1dPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c92ad4e1665f231e103f05b1621ec98_JaffaCakes118

Files

5c92ad4e1665f231e103f05b1621ec98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

31c14ddace00fb11cce111027ed9bedd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memmove
strstr
_except_handler3
memset

kernel32

GetModuleHandleA
lstrcpynA
lstrcatA
GetCurrentProcess
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ