72f27f87f2cac02f57b7239409df6f58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72f27f87f2cac02f57b7239409df6f58_JaffaCakes118
Size

245KB
MD5

72f27f87f2cac02f57b7239409df6f58
SHA1

6f8f846f8cd979f15757d6bdaccddc6729b98d3e
SHA256

bbc9fc79bc4bb85b152d0f9f3cc41d2426dede663df6c69bfaca7f86f1874e3b
SHA512

b6ac556be8733747a1cae3e62de4a9f1c4cf889baf298041d4a3888cf999bdd842d17a0bbd615f61ec42d8620cc820082977aa87f2880143750368b5c6030860
SSDEEP

6144:gXwCCpSbjghZ/UgHT1OZHISGlRgVrN4fMglq0:gXwNSb0hdUeTIZHISwEgA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f27f87f2cac02f57b7239409df6f58_JaffaCakes118

Files

72f27f87f2cac02f57b7239409df6f58_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d344bd4ca70531aa8734f2a9c788b42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
SetConsoleTitleA
GetProfileIntA
WriteProcessMemory
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ