adb80e25e437c6aa401110ff25ef8c27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb80e25e437c6aa401110ff25ef8c27_JaffaCakes118
Size

480KB
MD5

adb80e25e437c6aa401110ff25ef8c27
SHA1

09fd5315f558d645a889141f9fd37aebbdeb6191
SHA256

29f824906477092a34efaf221aec736055ed9b929d49ea90887423ee4c2234b0
SHA512

f928b2851229b6e01bf1576233e5588c36e712ec8264a5a8595cb140b0a0be25090c5f41c9bd34ddc9defc341ecfa395c5169f30f14356d362a9daa9f6498ae6
SSDEEP

3072:oUUI3sc8sbiwik22NV1V93h8tnLySvn6YH1Dw6ALHq1BuR6azdO8Af2qfLBQ/WMT:b8ZEiUh0LyqVH1Dw642uCfueM4iJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adb80e25e437c6aa401110ff25ef8c27_JaffaCakes118

Files

adb80e25e437c6aa401110ff25ef8c27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc4f489c78942097f4f5d98ffa0a483f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetTickCount
GetModuleHandleA
GetStartupInfoA

msvcrt

??2@YAPAXI@Z
calloc
free
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 448KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ