a862d51b081ffc51bf466b3f4ea51b31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a862d51b081ffc51bf466b3f4ea51b31_JaffaCakes118
Size

746KB
MD5

a862d51b081ffc51bf466b3f4ea51b31
SHA1

ffdeedc65922ec4041aa1e4eeee04fd306e0c55c
SHA256

601b702ed90c2b08e573ee9e94e1ad482cfb4c4b0e2d977f487e34d534e5ce2a
SHA512

3ab47b59e3c67f895e68fee136f96d47210cd1df9f1d02de9a6f9be89499dc6d509867f87c5229374dfbde6ed7a5d2267be2692f69fc044b379ece64cbc35bc3
SSDEEP

12288:IFYQvCNMoIIniFAjU7ZWCUxWmAjL+lu2k9kcf2luWQVIPaHZkJy6tSaYrfxfL2gN:MYyoMFIgYU7ZWCUxWfLGuCcf2l6VIy5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a862d51b081ffc51bf466b3f4ea51b31_JaffaCakes118

Files

a862d51b081ffc51bf466b3f4ea51b31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

597787484ca04e5e6e20f50917fabc0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
HeapFree
HeapReAlloc
HeapAlloc
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetTempPathW

msvcrt

_XcptFilter
_initterm
_cexit
__wgetmainargs
memset
_wtoi64
log
iswdigit
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
exit
_exit
_wcmdln
_initterm
memcpy

Sections

.text
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ