a8c63ac37c0f5a04a52ad66f9729b665_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8c63ac37c0f5a04a52ad66f9729b665_JaffaCakes118
Size

130KB
MD5

a8c63ac37c0f5a04a52ad66f9729b665
SHA1

a066cea6d198ee925609048d3883c853c27f71a1
SHA256

b746268a964a1bbdc62dcb62d552ce9dc77b19bcb0c7baf7a0db91966f84569b
SHA512

4f3e34f0396bcce32ce8097fb77e17573d4cb1f8ba750529f6e04d5aaeb6fd49177a412587fd88ed8ea284a92421c3e7eaf7dcbcace246783c95434fd929fd76
SSDEEP

3072:6I7eo8yRMvM+jU6OrNuLN957dBDwMJIDj34:6I7nRL+YlNE7d2DM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c63ac37c0f5a04a52ad66f9729b665_JaffaCakes118

Files

a8c63ac37c0f5a04a52ad66f9729b665_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8cd15339cd9f30da8243c34be622891e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

FindNextChangeNotification
BeginUpdateResourceA
Heap32Next
BuildCommDCBA
VirtualFreeEx
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ