a96bcb863a051bdbfa12664ce2cede65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a96bcb863a051bdbfa12664ce2cede65_JaffaCakes118
Size

251KB
MD5

a96bcb863a051bdbfa12664ce2cede65
SHA1

d1f45e1f6480318454b607f12dd2434fb71f1b40
SHA256

59d2b22b63cd6abbaf35ecd9ef71bd0dae8197f0ea0fcd8614beab64c82c504c
SHA512

c1bd89947f528ebaab711eada4630fc17d432a0e5629c69f55841bda6f4503b1d8be0408c16858756fbc3e6a47b5e11cf37900222ad7c53def3a71c5f4ad6713
SSDEEP

6144:3OLxuGEYCkkzAJRykdxyDHmNPta8/4hK9oTaL/F88xlgyc9J/BnS:3Mxur/fz5KoqxBV9oTg8YbYS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a96bcb863a051bdbfa12664ce2cede65_JaffaCakes118

Files

a96bcb863a051bdbfa12664ce2cede65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aae6a9cc75b727094f5daa768a4b21b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

ReadFileScatter
GetBinaryTypeA
WriteFileEx
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ