95d4f0c3078bdfce5d61cf4a533b94bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95d4f0c3078bdfce5d61cf4a533b94bb_JaffaCakes118
Size

460KB
MD5

95d4f0c3078bdfce5d61cf4a533b94bb
SHA1

459323b38255debe5a30a4122d7a14b66143b763
SHA256

63816c7699f2b312351dae56e7f57380a39c5c73808e2d6f94cdc3a28598caed
SHA512

5e28df83520af2ca8d3e39b591df54818e99df579c3969888cd683bdf569ad40e1a78129360dc771fe39b925755209c7e1e2df0f6223fad86477902b1f771c4e
SSDEEP

12288:kFWH03BDh7zcfymq7mHfF4Rik89Gin0Jn+G3YudYck6ra/M:koH0v8ymCm/2RqJn0JnZ3YJL6G/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95d4f0c3078bdfce5d61cf4a533b94bb_JaffaCakes118

Files

95d4f0c3078bdfce5d61cf4a533b94bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9129adc416e65f41f30ae3fc2d630d96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
malloc
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
realloc
__setusermatherr
_stricmp

Sections

.text
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE