739240521e6dcf02e5f1d41bb4134593_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

739240521e6dcf02e5f1d41bb4134593_JaffaCakes118
Size

6KB
MD5

739240521e6dcf02e5f1d41bb4134593
SHA1

e3d9fe5498e1df4ed117c5e128b550d2b8816d2d
SHA256

407fb7a7b6288558209164c3d986c5de49ec02ff6477821d2655c0e644e26bd9
SHA512

bc4409ab237085ca8c9470a671c3f9f7de37fc468a6ade5907ee827f6a9f94539b63037d24277d5204a771552fc30f902acbac6bd35b2ed89ccf6423e580d985
SSDEEP

96:Tnh2RBB3lGL1M0OGO5O1n/UKe9gg0cOOlPhX+e7lPtboynQ+P:Tnh2hoL1MWOgJ5eag0cDP7lP1oyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
739240521e6dcf02e5f1d41bb4134593_JaffaCakes118

Files

739240521e6dcf02e5f1d41bb4134593_JaffaCakes118
.exe windows:4 windows x86 arch:x86

64bc9219a31e011ab17d7969582ff6bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LockResource
CloseHandle
GetStartupInfoA

advapi32

GetUserNameA

msvcrt

strcmp
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ