623f25fd45e5d4fd71d7fdcc50fc9dd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

623f25fd45e5d4fd71d7fdcc50fc9dd8_JaffaCakes118
Size

215KB
MD5

623f25fd45e5d4fd71d7fdcc50fc9dd8
SHA1

37848ca8d50949e56348a176db29cf7a08d26d11
SHA256

cf73088a1d65927c41393c2da96c4e660d64bed5ff71b63ca0e1c8956e021543
SHA512

8aa9c68850d0c86e759acec3ed1a181b19d67814d0d229b7d0df3c7f4c1f939008653ee78c6132d15af51bf3ee5d8382ea05b1226d19ede20e389d236f48056e
SSDEEP

3072:dVGF5rdyutTBf2obNfHtCBFTEb5zpW4k5okJUzINRtno1SpQxRW0VpGsy5+2A6:XGF5pyutTBeiHKKDqVC2KSQRW0V65lh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
623f25fd45e5d4fd71d7fdcc50fc9dd8_JaffaCakes118

Files

623f25fd45e5d4fd71d7fdcc50fc9dd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3c81edd317ad9aba0a3a80ee99c9c8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
__CxxFrameHandler
malloc
free
_exit
_XcptFilter
exit
_acmdln
??3@YAXPAX@Z
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcpy
__getmainargs

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ