74683ec1529fba3b49d4ce8132b55033_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74683ec1529fba3b49d4ce8132b55033_JaffaCakes118
Size

207KB
MD5

74683ec1529fba3b49d4ce8132b55033
SHA1

048b64bc814e939ebb0d6c95b2c2ae3a786de567
SHA256

d86cc30c1e6080102e83a402d437b2a90124b60d86c67a1b1e26acd18970ea33
SHA512

91f0a55b5f6ac418026be8c7d95967f11ffae05f3d22cb8049628d26773beb0a99dc0390e2eef1a8caf016b2dc78c746e13da20516d651c95e37651a2ca2f9d6
SSDEEP

6144:hEasx3Jd5C8J0wCShJ23TT31XN0KZdreB:hEasjd5CK0ZS7+TT3rQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74683ec1529fba3b49d4ce8132b55033_JaffaCakes118

Files

74683ec1529fba3b49d4ce8132b55033_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b400035a206bf045aef64abd2f9c0189

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
cos
__setusermatherr
exit
_except_handler3
free
_initterm
_adjust_fdiv
__getmainargs
__p__fmode
_XcptFilter
_acmdln
malloc
remove
_exit
__set_app_type

kernel32

GetModuleHandleW
Sleep
GetStartupInfoA
VirtualProtect

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ