ab41dd7ad4acb1267b909bb6945beb55_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab41dd7ad4acb1267b909bb6945beb55_JaffaCakes118
Size

84KB
MD5

ab41dd7ad4acb1267b909bb6945beb55
SHA1

d83996b5aa373746e017b279076787b50e1e5709
SHA256

f8b58f6f65e8d2b267672f084d41b1ef5afe6795d6750ca5e90be44ac2eab0c0
SHA512

41e77f4d19f180bd2bad5d587f16a47db6b8ee895cc5334314e891ca02c659a5d37c55051966a4fefdf7691231ce497ee77ac889fdeac2bf96a0fe6eba2cbb64
SSDEEP

1536:3ZkpwWuKZ2lm0qSNpBeBUC5AeetZjcm3SeJjYAv92akleescV4VHgu:J1Dlm0qSzQBUjeethr33lYA12D0Hy4BR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab41dd7ad4acb1267b909bb6945beb55_JaffaCakes118

Files

ab41dd7ad4acb1267b909bb6945beb55_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c717b392bf59833b83a02c45b0cd827b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
fopen
_exit
cos
_acmdln
_except_handler3
_adjust_fdiv
fclose
__setusermatherr
exit
strcmp
__p__fmode
fwrite
free
atoi
__p__commode
_XcptFilter
__getmainargs
_initterm

kernel32

GetStartupInfoA
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ