b315465b80149603024bb5a3c583b524_JaffaCakes118 | Triage

Sharing

General

Target

b315465b80149603024bb5a3c583b524_JaffaCakes118
Size

76KB
MD5

b315465b80149603024bb5a3c583b524
SHA1

4d4b798303a970b4641c528f62b01f8f670d540c
SHA256

e29bfc3884f06ccb67026a35a8b556449f10eff0d7517ed4a3ec7f101f0c2882
SHA512

6ae4558de0e7fe62a8cc6bbd69e3091725800bc63544bd24c316b9913d31e53bbfb2f6fedd09db26c555f88a7b0f4fa8187861421be6189d0c7f2e6ef234ed40
SSDEEP

1536:A816dX6Y5nJZJYvet+VeE1xs3cPH91OFNcqpc3BnGkvnCKkiwkKW:AZdXnJZ+e4Vh9ArAxth9R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b315465b80149603024bb5a3c583b524_JaffaCakes118

Files

b315465b80149603024bb5a3c583b524_JaffaCakes118
.exe windows:5 windows x86 arch:x86

95104c21fb023aa750237185a3b8fdbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

fseek
_acmdln
__set_app_type
sin
_onexit
fwrite
_exit
printf
strlen
fread
_initterm
_adjust_fdiv
_XcptFilter
_except_handler3
free
malloc
exit
fclose
fopen
strcmp
__setusermatherr
__getmainargs

kernel32

Sleep
GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ