897d645f87742752d17d8a1e6fae05c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

897d645f87742752d17d8a1e6fae05c0_JaffaCakes118
Size

7KB
MD5

897d645f87742752d17d8a1e6fae05c0
SHA1

365dd230f2e917e4a9b5645ef38b330ab0ab3507
SHA256

4831bfa392d9674fee751012f4ea23b9f8dec74c8ec2eea1c5a9a3e47606ead3
SHA512

fcbf3ffe2677e1df692bc6116fbb513b1e8aefb5ec8a5ab1d5affaa2826ca6b7b243ac44a12ef1ebaa911c2a509cb90038aa734758130b68aa69ea804072a3ac
SSDEEP

96:vuG7tETPUkPMeHbipq/gXzxjwuziwSSC2YMwrQUWPtboynxMWFI:vN7tuPUgMeWpq/gjWqPSSuMP1oynGAI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
897d645f87742752d17d8a1e6fae05c0_JaffaCakes118

Files

897d645f87742752d17d8a1e6fae05c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7dfec375d29457b416dec7e92cab04b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
Process32Next
lstrcmpiA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

msvcrt

_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??2@YAPAXI@Z
_XcptFilter
_strcmpi

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ