692787cb3ee7abd11151ab438a7d7080_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

692787cb3ee7abd11151ab438a7d7080_JaffaCakes118
Size

93KB
MD5

692787cb3ee7abd11151ab438a7d7080
SHA1

2fc954b1091975f82d8cddbe4627e5954883eda9
SHA256

eaac586b3cae4c2753821c6978e483e12cbd0aa8a94ad8919c54cc86ba6f002f
SHA512

b4ead50992be37bc29c4b39b52e4b949e8b85ce6babbe9a6cfe2c2fbf389c718b981ada839603ee0907681a04019b92eca4c3352a9f59efbab4028ce402d8fa7
SSDEEP

1536:TFbW6Ci9J9zv17OUU/KSO6zp+FoKh3XNpq4qSHup2qSwuU1Ig3GNF/69BhNR6e+4:RWPi9JFv17O1Z5KJCqHu6U13qFy9Bd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692787cb3ee7abd11151ab438a7d7080_JaffaCakes118

Files

692787cb3ee7abd11151ab438a7d7080_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6cb48480c84f3e9e2db940588be16b02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_exit
__setusermatherr
fopen
_XcptFilter
_acmdln
strcmp
__getmainargs
fwrite
strlen
_onexit
printf
sin
free
__set_app_type
fread
_initterm
malloc
fclose
fseek
_adjust_fdiv
exit

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ