788bb8b47497080cbdf781c6b0b90eca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

788bb8b47497080cbdf781c6b0b90eca_JaffaCakes118
Size

84KB
MD5

788bb8b47497080cbdf781c6b0b90eca
SHA1

cbb8624731d93d46710396f280b6b7ba504be025
SHA256

346f3ba5ae5bda5549f75e56f21c2572608f3060ead3a5e82846dfedd7b21930
SHA512

12373c4242ba479913b913f17e3db673b73a1e7a353ff439cfed7fde469054fa9b19d76f2ab02e7a928fbfa63f5c12396061f1f6073714fe8658d300d500fae2
SSDEEP

1536:i3IDqxKqc7cudIhdLZdTcT0uNutCRGVO4JXh2pWt2r7XGNkbVqkDArde:8RAcuOXL/uNs2GV9h2IoWebVlGde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
788bb8b47497080cbdf781c6b0b90eca_JaffaCakes118

Files

788bb8b47497080cbdf781c6b0b90eca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6cdcaddebd8d92c5977f89be46a48ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
memset
exit
free
fread
strcmp
__p__commode
getenv
_exit
fopen
cos
__getmainargs
fclose
_adjust_fdiv
fwrite
__p__fmode
calloc
_XcptFilter
_initterm
_except_handler3
fputc
malloc
memcpy
sprintf
__setusermatherr

kernel32

VirtualProtect
GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ