86a49eb6ff6c503ce046c4081611d186_JaffaCakes118 | Triage

Sharing

General

Target

86a49eb6ff6c503ce046c4081611d186_JaffaCakes118
Size

36KB
MD5

86a49eb6ff6c503ce046c4081611d186
SHA1

41c6557baf5360d481b956f2621eb4ff2dd2fba9
SHA256

cb944ecf632a155150049365f0f78fa360f84b0441d1e084df18a8c780be75d1
SHA512

84e7611c29d54484257b4388e8fc54bd99e6704e8775ffe94e5df422983210722ac1b248e21e05443c19bd56f5902522fc2f0ee554348309af2cb32fdadda663
SSDEEP

768:IJ4S+sOkDYeaG/eHYLvwF/hJIOanToIf1mv4dgJDYje/g8:InNhaG/e4zwNhJIOanToIfS6gZD/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86a49eb6ff6c503ce046c4081611d186_JaffaCakes118

Files

86a49eb6ff6c503ce046c4081611d186_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79002b7798b611bb26849f6cf52ac291

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetStartupInfoA
GetModuleHandleA

msvcrt

sprintf
_stricmp
malloc
_except_handler3
free
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_controlfp

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ