b0f72951bc721aef73f8e178c3eedbb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0f72951bc721aef73f8e178c3eedbb0_JaffaCakes118
Size

166KB
MD5

b0f72951bc721aef73f8e178c3eedbb0
SHA1

d3c524d47f4c66b006e583a07cbc703ebc9a4c04
SHA256

84307a1a9ef64acc77b755b0a0c71dd939f8adac7b6d8ea7a6a1149519779e4f
SHA512

9e28c3cf6206759036a23b822f9cda8a3957d1cbf50ed4d28525506370a6890a5a240018643715676084f164763b6ba93b9fc91e71461f9975afb3614bb84d37
SSDEEP

3072:QlxYlz/ASb0Ak2yVaakZtppWn+LXbV9KGo+lSAMdz/sX6h7sw93aiiTK:Q3iz/hyVaakZnpdLLOGoiQLJuw9L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f72951bc721aef73f8e178c3eedbb0_JaffaCakes118

Files

b0f72951bc721aef73f8e178c3eedbb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ea82d2bfbc31991470936b3bae983f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
ExitProcess
GetThreadTimes
FindNextFileA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ