63b956af17ac2d8c16b3f63710aa6af3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63b956af17ac2d8c16b3f63710aa6af3_JaffaCakes118
Size

134KB
MD5

63b956af17ac2d8c16b3f63710aa6af3
SHA1

cb0eeac5923d6e1e861618050de3379928bf50bc
SHA256

6efd1cc45af3f27c0024fcbbe137eab6ae2b90e5b21706a8b1c95c684a24515f
SHA512

4fb6cc1f420bbb8a15f8ab1def89dad97256898132e79c8cdb89b9a5deebd03b2d6fc3071960f1399f08efbcf776b8926d0830ac79bbf33693357949568a55f1
SSDEEP

3072:iqaXBGXQzkFgC3zJ/9E18LodY7FyX0gmjzw9lPALj6SignGPNLc:3aXBGXQQe16o4Fo4jzwrwup

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63b956af17ac2d8c16b3f63710aa6af3_JaffaCakes118

Files

63b956af17ac2d8c16b3f63710aa6af3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f92dcbd2a7bfedf7954d6638fca4b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5186
ord354
ord665
ord1979
ord6385

msvcrt

__setusermatherr
_initterm
_controlfp
__p__fmode
__set_app_type
_except_handler3
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__CxxFrameHandler
memset
strcat
_adjust_fdiv
__p__commode

kernel32

GetStartupInfoA
FindResourceA
WinExec
SizeofResource
GetModuleHandleA
LockResource
LoadResource
GetWindowsDirectoryA

Sections

.text
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ