a30033b7125c04b5512a2fbcffceb8ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a30033b7125c04b5512a2fbcffceb8ad_JaffaCakes118
Size

84KB
MD5

a30033b7125c04b5512a2fbcffceb8ad
SHA1

1ef6a94705f3cad5b13f2f9d080885159978afe9
SHA256

14be47569244ca03045a9b90dedd25330e88894011465610ee6a67557994142a
SHA512

b647790aec03a70e031e4866e089c940d7a2e64022ed97958397879ade30acdb495acef6c7c9a1a1c6dccf882c68dde3b5cc77d0943efb9640dc18253de74ef7
SSDEEP

1536:7dbuZ99mfghP3TYHV3myjSditofX9HkI3RIjTC6iEj27+tj:7db+LdTYFjSMWtf3qjliEr5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a30033b7125c04b5512a2fbcffceb8ad_JaffaCakes118

Files

a30033b7125c04b5512a2fbcffceb8ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4707cee3329c83415f655e59372af875

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fopen
_adjust_fdiv
__setusermatherr
_exit
_initterm
__getmainargs
cos
malloc
free
fwrite
fclose
memset
__dllonexit
_XcptFilter
strcmp
_acmdln
__p__fmode
__p__commode
atexit
_except_handler3
fflush
fputs
signal
exit

kernel32

VirtualProtect
GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ