718bd40b9cce1111c9178e9990a6c25f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

718bd40b9cce1111c9178e9990a6c25f_JaffaCakes118
Size

252KB
MD5

718bd40b9cce1111c9178e9990a6c25f
SHA1

b84c13bcd93719a61f3722df8cc87f7e89698f94
SHA256

83958f70221b532542dc14ca3a4731e02101d390ca6d83af1f6a8386841a7d13
SHA512

00652726d760bbae7d327ac0c64e7a43db9086073cfa03a69d9debb9398bf9d3093cfe4e931825d7bd299114b5d907d25e2999a921b507a144a15afbd3eb04fb
SSDEEP

3072:p0rHpHUQtRtonRCpwX5RVCSlQqp5hpQVvDtSf6hkZJLMfydUWfwOixxQr6/Cb12V:zbqDU6hhabixxQu/Ch2QTmtTBsjVUJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
718bd40b9cce1111c9178e9990a6c25f_JaffaCakes118

Files

718bd40b9cce1111c9178e9990a6c25f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3d79ecbe2790ba349613f3a0663df75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_ftol
_CxxThrowException
_purecall
malloc
free
_exit
_XcptFilter
exit
??2@YAPAXI@Z
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
??3@YAXPAX@Z
_acmdln

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ