a75667e2717dcfbd638c8d3aabe8509c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a75667e2717dcfbd638c8d3aabe8509c_JaffaCakes118
Size

520KB
MD5

a75667e2717dcfbd638c8d3aabe8509c
SHA1

54d82bb6884b32157431fde6576c92f325658a76
SHA256

49a20424f94deb14850b72d80ac387bf1413228dd3b68b35c0dd83ce99f12ba9
SHA512

2f040ff282fb8b7894b4a14fec566c5b32d171230da88750b588af37b7df08fb19b8abc37b29a3af896fdc3c028954f71f9d7c2a8972fbc0696962a69e9f1e84
SSDEEP

6144:E8s+zXOzuscSv0trVH1Gw642uHDwhH3D2Su:bGzxf0VVHgw6aGH3W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a75667e2717dcfbd638c8d3aabe8509c_JaffaCakes118

Files

a75667e2717dcfbd638c8d3aabe8509c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4f489c78942097f4f5d98ffa0a483f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetTickCount
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
calloc
free
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 488KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ