ae38cb32f40f0aa874b64a75f6f8bbf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae38cb32f40f0aa874b64a75f6f8bbf5_JaffaCakes118
Size

228KB
MD5

ae38cb32f40f0aa874b64a75f6f8bbf5
SHA1

805623f3fddf5a75e6d67d225a29078a1306cd8a
SHA256

0441dc7a444dc8b62815fd955a19165013d081963e18c65966aee510118dd7ae
SHA512

9ee1cfe1fe14f2ba714e027129facfdb12d301ac5864e3ea804c07b6971e2473fbd406841d014d09e2bb1de47dc91c4f58d3128f83527646e24c98048ac12d3c
SSDEEP

3072:+G3FaUUpaYtPPf8aEWRjffD/wR8loUFWWdqHvK1HAiN7xjgcrB:v3Fa5/tXf/FT74KoOWvK1HAi7jgcrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae38cb32f40f0aa874b64a75f6f8bbf5_JaffaCakes118

Files

ae38cb32f40f0aa874b64a75f6f8bbf5_JaffaCakes118
.exe windows:1 windows x86 arch:x86

70ffed5f6c899ee699a0f2458190b4c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
_vscprintf
_lrotl
__p__fmode
_exit
asin
_initterm
sin
strerror
_controlfp
__getmainargs
memcpy
_execle
_XcptFilter
__setusermatherr
_adjust_fdiv
_i64toa
wcsspn
_wrename
__set_app_type
__p__commode
_spawnv
wcslen
_pipe
_except_handler3
exit

kernel32

GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
lstrcmpA
GetCPInfo
LoadResource
GetSystemInfo
OpenProcess
DeleteCriticalSection
IsValidCodePage
IsDebuggerPresent
GetStartupInfoA
ReadFile

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ