a549013fe869ced2f8e01e09ffe0aecc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a549013fe869ced2f8e01e09ffe0aecc_JaffaCakes118
Size

83KB
MD5

a549013fe869ced2f8e01e09ffe0aecc
SHA1

6e6f63caa0c683ee12257be221e46804df60274c
SHA256

53f3576ccab39eb6d7df42b205d4ba8b642c1d0594ac9edca1c489a06187afb8
SHA512

35d68babeb1645b4e99c297e80e08abb5665a3e36eb1f1e610947a44cd79b8d6a9dd19dcf5e638ed1a7f662f409b491fdbdd7b6df0ab5dd33d3e658828b193fb
SSDEEP

1536:whZlFbexCqvmS9yqHbqm6IMGhlflZuJGOyK/:Ql18jVbqm6+4JGOyK/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a549013fe869ced2f8e01e09ffe0aecc_JaffaCakes118

Files

a549013fe869ced2f8e01e09ffe0aecc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b89ed943b60544f02033561b2d6399fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
fopen
_initterm
__p__commode
strcpy
strcmp
fwrite
__p__fmode
__setusermatherr
strncpy
free
_acmdln
fclose
_adjust_fdiv
strncmp
__getmainargs
_XcptFilter
_except_handler3
malloc
cos
exit

kernel32

GetStartupInfoA
VirtualProtect
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ