949af8d0f15c02fbc795f27454f789fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

949af8d0f15c02fbc795f27454f789fc_JaffaCakes118
Size

33KB
MD5

949af8d0f15c02fbc795f27454f789fc
SHA1

005cb3857ba10e23b330c25e3ef41654f5fcb829
SHA256

3b03fe82259bb4118cd3458db72df52c240d20de928be8defb06cb69e3b6854f
SHA512

bb6adc2691c45faffb999c4fbcab4534a4ecf7cbfa2c01b29928fb025ffa5e855f2c50951d312f11dfa4936d37ed48c616a3a4addcf546014ade34fd4778b0a3
SSDEEP

768:rSAZ1Im+t4t/rHnso7Nrm+fQivLm1NhYtjbEq5AlZ:rf+w/7RBpYS8ybEqylZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
949af8d0f15c02fbc795f27454f789fc_JaffaCakes118

Files

949af8d0f15c02fbc795f27454f789fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0012a9ffca20938104436dbeb8f204a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
ReadFile
CreateFileA
GetProcAddress
GetModuleHandleA
CreateMutexA
OpenMutexA
GetFileSize
CloseHandle
GetStartupInfoA

msvcrt

_except_handler3
realloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
free

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ