65168d2bbcd862bb462aaab2cb52e97f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65168d2bbcd862bb462aaab2cb52e97f_JaffaCakes118
Size

20KB
MD5

65168d2bbcd862bb462aaab2cb52e97f
SHA1

e73904175a820bb281d106c730748ea3e8053668
SHA256

0effdf62bbe2d110551b672e4d3f24f575aedf01e5ab9b4d7672f3b7659c46e2
SHA512

325a300626852ff2c05accb5afdbcd4bb31674700f85d75a3532bc48a574a435f66cd3b9d5ebbb5a8b6f4338b4ad89e408fab093cded7634ac9ccccbedd670ff
SSDEEP

96:yYsVNZYccS4roZWeX2AZB6WB6xvPtboyngB7uPv9II9Ez9:qN6ccKZWE2cv2vP1oynieI5h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65168d2bbcd862bb462aaab2cb52e97f_JaffaCakes118

Files

65168d2bbcd862bb462aaab2cb52e97f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

49d69aaa7e7e22a5d348442c0be2bfa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5465
ord3511
ord5194
ord268
ord860
ord4202
ord533
ord2818
ord540
ord825
ord2764
ord5778
ord6407
ord5651
ord800
ord964
ord1567
ord798
ord1997
ord3663
ord3616
ord3127
ord350

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_exit
??1type_info@@UAE@XZ
__CxxFrameHandler
_XcptFilter

kernel32

GetVersionExA
GetSystemDirectoryA
GetWindowsDirectoryA
SetFileAttributesA
GetStartupInfoA
GetModuleHandleA
Sleep

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ