89c2fc9add7bd7d8596ea871cdba26b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89c2fc9add7bd7d8596ea871cdba26b2_JaffaCakes118
Size

147KB
MD5

89c2fc9add7bd7d8596ea871cdba26b2
SHA1

45419c36a279fbe9be2157210c2c08ef3d994c68
SHA256

2098e7edf275c700f74caa2b7a8893d7f7bcdb41f187d1c8e3956417ad132b55
SHA512

c314500fecbbe6956aae454322b03d6f57f758a92570a753432a6c2acff5b7aab404e22567090a875a3d0f24b07619703dbeb5b35dcad1ab24ae55f2ce92904b
SSDEEP

3072:7YGnzPTCWtpqFZ78sWHXMl+vdE7amTUlfSaKJIKfU4Y:7YIz7CYsWH7dE7aYKfxKaey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89c2fc9add7bd7d8596ea871cdba26b2_JaffaCakes118

Files

89c2fc9add7bd7d8596ea871cdba26b2_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

4f33b0cd8c0dfd5cc848ce180f658c5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
GetLargestConsoleWindowSize
ReadConsoleInputA
GetProfileIntA
GetStartupInfoA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ