aded4a63c928fe128b630720cc9a7426_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aded4a63c928fe128b630720cc9a7426_JaffaCakes118
Size

68KB
MD5

aded4a63c928fe128b630720cc9a7426
SHA1

8114293af43046135f786fea84c8e55c19552cd7
SHA256

7f3654c4480a79760b1856eebb6c81e8ba44f76c2d641b48bb2c9c207ae3e1a4
SHA512

2bf65ba7e2b210d961808a326e978d88ffe4eecaa55c2234b04ce54974f08f7ab01c5263691b447ff113ad43b01eef46cc14d5e8ea40535f374d16a6eadcedb8
SSDEEP

1536:6AoMCoFbjviD6XrCRiLTzHzW9d2ECbD/cLFd:6ALZeOXrCRizzCC3cLFd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aded4a63c928fe128b630720cc9a7426_JaffaCakes118

Files

aded4a63c928fe128b630720cc9a7426_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37f7f83efc78aaf8099cf6c16c2324d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileA
GetModuleHandleA
GetStartupInfoA

msvcrt

calloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
strcat
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
__setusermatherr

Sections

.rdata
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ