7813c88e2321a43eb4791e131270390f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7813c88e2321a43eb4791e131270390f_JaffaCakes118
Size

14KB
MD5

7813c88e2321a43eb4791e131270390f
SHA1

0886140fc109616c891d3dc0242937c6192d9879
SHA256

a4f34ee73b4f4b985caeffaf2e23cf7156a82c2bbd5c8e6064971b32198753f9
SHA512

5cc794e25ad0324f7a171dc12e72747575ea5414de1f7380eb6f6f829b191c8102e123077dccae67beeb4876013ed23ee2495f448c054a255fb642567699135c
SSDEEP

384:3nnCYH/ORj22XxxaYhMMlD/ayVLFOL+v05l9Mj/nnH3ebd:3ngjPxIYh9lDV5o2CHMj/nH3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7813c88e2321a43eb4791e131270390f_JaffaCakes118

Files

7813c88e2321a43eb4791e131270390f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d2db3318a4e7775e6609e7e7d4d1edd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsupr
_mktime64
fwscanf

Sections

.not
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NewIT
Size: 512B - Virtual size: 273B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE