aeb323006ad592d4c2513b5d3197bfa9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeb323006ad592d4c2513b5d3197bfa9_JaffaCakes118
Size

178KB
MD5

aeb323006ad592d4c2513b5d3197bfa9
SHA1

9ba29259b49202988918cda6a68afc17dc3180cd
SHA256

59e37a4161dbf3599f96da634f200bd1669c5c114559ca2490befbd63f9c773f
SHA512

b1ebcb2887b49153e659f9cd8b637df74804c0b38031221ea8f0ef2b90897f4e5d5374a6ce942cef40c326951cac9945c12aaac472da6e5267a89547cfe47db1
SSDEEP

3072:macR84g0/DlfAwri46Jb8BsXS0OsL5mdOMH:/MXlri46MsXSBsL5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aeb323006ad592d4c2513b5d3197bfa9_JaffaCakes118

Files

aeb323006ad592d4c2513b5d3197bfa9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

152b24ee671a2a6d9dcaa53a3b0dca7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetStartupInfoA
VirtualProtect

msvcrt

_acmdln
_except_handler3
_adjust_fdiv
__getmainargs
__p__commode
__setusermatherr
exit
log10
__p__fmode
_initterm
__set_app_type
_XcptFilter

user32

FindWindowA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ