a690ea1aae79bd632abe0c3376bc300a_JaffaCakes118 | Triage

Sharing

General

Target

a690ea1aae79bd632abe0c3376bc300a_JaffaCakes118
Size

112KB
MD5

a690ea1aae79bd632abe0c3376bc300a
SHA1

2c6177fa8dac0f801576db76d5ae0b565ead3d27
SHA256

bf0281e254bfe4df819539341e22197c95f14c16e42d146d6ab0f43d010df817
SHA512

21e24f27e04922d0e676650e9ba5442095ccc717f10c728dadf0da37c82cc74c25eefd782fcb03963aa1bf76fe7e9054356f2e6fde9d6c3a16b485022458ee0d
SSDEEP

3072:lM/O5s5R2zp4Mcvu4gbfHBPy+K0+QXfIoLDuE8ud8ur:lecQR2zR94WHFTK47f8ud8ur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a690ea1aae79bd632abe0c3376bc300a_JaffaCakes118

Files

a690ea1aae79bd632abe0c3376bc300a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a028e1c4b05502c036f0ae6f6280a4fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetEnvironmentVariableA
GetThreadSelectorEntry
SetDefaultCommConfigA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ