8554ae995046429240d351d013f110a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8554ae995046429240d351d013f110a2_JaffaCakes118
Size

122KB
MD5

8554ae995046429240d351d013f110a2
SHA1

d93c96b19bddecd32cb078b58bea66c201f415e2
SHA256

5cdf8d7286eb142234ea265e13fd81ce7e32b39f3c91b24fca9017b56940e3f2
SHA512

30910eadfbf72124c818260c0fe45704c7049729c6bf78bb0aadc7303f9f285e632bcefc6d97fd2c2d62b67e0f4e22b28f705e2fa1816710a41acf0cd32dff48
SSDEEP

1536:KsCNNibp1HcJ6E1j8bhKhAUXiBU8MFBaxskw7/K72ir9DJMCsC4Y64jr7ZiV:K1kp1ZE1+hFQVkHhrEFvZ41iV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8554ae995046429240d351d013f110a2_JaffaCakes118

Files

8554ae995046429240d351d013f110a2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

591032c2271e392867404049486b56ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
SetEvent
SetProcessPriorityBoost
VirtualFreeEx
SetEnvironmentVariableA
QueryPerformanceCounter
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ