ace8e647c1c54c75854001146a24ece6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ace8e647c1c54c75854001146a24ece6_JaffaCakes118
Size

4.0MB
MD5

ace8e647c1c54c75854001146a24ece6
SHA1

89f18907a202ab8ae6d59e78287b411f6907105e
SHA256

3e53e823a38f620853179d01924b4b5948d45c5564839f81fd053311901344f3
SHA512

ffab61605f5ee198b28525c828cfad87f3973ae86295557170f5222409e09084c5d0af882e9a1469ea642e75dff999c2c31da936b60d8f470d9a5bcd17cd41a7
SSDEEP

192:baF4UtakV4nQ0vkmSJXy0d7HP1oynb60YAIy:4fV4AFJi0dL1d6ZAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ace8e647c1c54c75854001146a24ece6_JaffaCakes118

Files

ace8e647c1c54c75854001146a24ece6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67bb3f21147b39a6fbb644aca84822ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
GetCurrentProcess
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
WinExec
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
realloc
exit

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ