69d62e143d6b600c9180e38ba65f6736_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69d62e143d6b600c9180e38ba65f6736_JaffaCakes118
Size

512KB
MD5

69d62e143d6b600c9180e38ba65f6736
SHA1

bfc1236818c36d28901521a6f88caae8e1b2ab95
SHA256

19af02b4451be6a6d62ac273dcabf9a42b2790a032a400dfd922d19e6dd80974
SHA512

9db734c35bce860b6942ff413a6e10ae35ca2386d196a9a2d9493f2e16d47cb0d63519a950757cae64f1c07e10a79af5ee79d6b6a6be2cac54a2b5685e1714f3
SSDEEP

3072:n3e353scwqRqrYbjg5UGrecPAybVpRq880DAT9BPUjWhOJnHtmgvQUjSJhNW115w:g8/8xLGreeDM8UT9BPAJnNDvQF4phq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d62e143d6b600c9180e38ba65f6736_JaffaCakes118

Files

69d62e143d6b600c9180e38ba65f6736_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4f489c78942097f4f5d98ffa0a483f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetTickCount
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
calloc
free
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 480KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ