78a1dc493b60c07b27b4405ca0463aff_JaffaCakes118 | Triage

Sharing

General

Target

78a1dc493b60c07b27b4405ca0463aff_JaffaCakes118
Size

29KB
MD5

78a1dc493b60c07b27b4405ca0463aff
SHA1

c9f4c37d919edef44ccc00f63d1b3c2e444ddbe0
SHA256

ac5efeff2ce044dc2f04de1e8c8975788bc28000115ee9823945657b87eb421a
SHA512

4842adc7e93d89aba9e665bde0e25546b1a91bc0f2d0e71e385afeee979fc8d6c973ba2923823dac8437fb70c6cbba578001f1d76f8b7a93576f6f65da5b0b79
SSDEEP

384:C9fJp7dZ7l9Q5xMmFDCyZq58q/VTfOYufKXnoBH2JOEA/2:MxR7l9CxMmFDCyZq5f/VT2Yu2nosJ7k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a1dc493b60c07b27b4405ca0463aff_JaffaCakes118

Files

78a1dc493b60c07b27b4405ca0463aff_JaffaCakes118
.exe windows:1 windows x86 arch:x86

99f22be5e374d53a429beb60ed9ec07d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
ReadProcessMemory
FreeLibrary
DuplicateHandle
GetFileType
GetModuleHandleA
lstrcpyA
GetSystemInfo
GetConsoleCP
CreateProcessA
IsDebuggerPresent
SetPriorityClass
SearchPathA

msvcrt

__p__commode
_adj_fdivr_m32i
atan
_initterm
_adjust_fdiv
__setusermatherr
toupper
_wcsnset
_controlfp
memcpy
__p__fmode
exit
_except_handler3
wcscspn
_wfopen
_spawnve
_XcptFilter
_mbsnccnt
_mbsstr
_acmdln
__set_app_type
__getmainargs
_exit
wcscpy

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ