b18b4325a6fe40e00d351209b21dd594_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b18b4325a6fe40e00d351209b21dd594_JaffaCakes118
Size

66KB
MD5

b18b4325a6fe40e00d351209b21dd594
SHA1

5383a85ea995b1942ebcaa25e73d3ea7cba8d33b
SHA256

0b9ccfaae924aae6aae30463d2b6f98abf1ab51c7cdbc4de7f0787ba45ab104d
SHA512

6d4be8c4e90436dbe9acb46ef9e6234c3e9968a791ac6bc0cffb4737855f4257f1abe50194f960e3f3576a35ad81997d55cb0c0372be9f4d07b87421dd611407
SSDEEP

1536:X7Aud5wc3aZOa/I4r2BGi3EkyLs5X5QKGzEgrWfe:LAS3AO8IE2lyLuAzEgrge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b18b4325a6fe40e00d351209b21dd594_JaffaCakes118

Files

b18b4325a6fe40e00d351209b21dd594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

530f361445908135a515bcbaaa3d1a75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
lstrlenA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
malloc
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr

Sections

.rdata
Size: 1024B - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ