656d85dec51ee25e9e512cc1bc4cf98e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

656d85dec51ee25e9e512cc1bc4cf98e_JaffaCakes118
Size

355KB
MD5

656d85dec51ee25e9e512cc1bc4cf98e
SHA1

cee0aa0b52d9bc9f9ae2b0066b7b8233c585e703
SHA256

2cc3e7d1c639d4d93d659347cce06c557fc007af11d7a5c7b3ace6a2a4100276
SHA512

14748c7b91775ab4541cc8b3ecdb5a47881f68564cc9d32eff1cccfba99c35ecb06f6bcc91816a0e92258863241338965748db4fd529d411c5b934656592e077
SSDEEP

6144:HWwMPKotBhxuFq/4I0OQ6iQHWSRpjvpyoWlRlDqDjl4AFyO7QR79VulTweZQM:bEPB/5/4b6ifSRPFWlRl2t4AyiQZA8en

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
656d85dec51ee25e9e512cc1bc4cf98e_JaffaCakes118

Files

656d85dec51ee25e9e512cc1bc4cf98e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91f82168f1c0d622c00cb0cde3b2465a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
cos
malloc
signal
strcmp

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 400B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE