a791537eb8c1aabae502dc8e6440ab37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a791537eb8c1aabae502dc8e6440ab37_JaffaCakes118
Size

52KB
MD5

a791537eb8c1aabae502dc8e6440ab37
SHA1

9c587a29d1e972c17cd0746a1f252cc047550220
SHA256

f319422d793e03b4e590491b4fd40961e083c5d63f9ed382757d2e8eed934561
SHA512

315a7e11d5df7dc34fbe9e90a7c6d13d1c0352212f57c3345654d7959a8300e8ccebc5ab24bbb06a8c5c82938d7a409ad07937c7d21f0cce0a6ac7eedca0aeeb
SSDEEP

768:mYGltnTJWNAVxqZqL98+QxIibjU/Q433vGPfLmmd3QNDbmk2To6nm6WSEw:WJW2VxqZqJMktULbrh1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a791537eb8c1aabae502dc8e6440ab37_JaffaCakes118

Files

a791537eb8c1aabae502dc8e6440ab37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ffc225f383eb3e994e3bca743efc746

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
LocalAlloc
GlobalAlloc
lstrlenA
GetTickCount
GetLastError
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetCommandLineW
GetStartupInfoA

setupapi

SetupQueueDefaultCopyA

msvcrt

_adjust_fdiv
memcpy
_exit
_onexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE