b358ff75fa61e3c74006aa6cb5478f09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b358ff75fa61e3c74006aa6cb5478f09_JaffaCakes118
Size

88KB
MD5

b358ff75fa61e3c74006aa6cb5478f09
SHA1

92fe3360e1dcbec34d7889c4a72cd71454599d58
SHA256

4386a6b8bb6c91fd41917c7ca21649044b3d63f1a3738b48d467fd8feec16228
SHA512

3c952e97ad8e54b60600d3198ed2f7eeeb216563e0583fc2fc550a24df9336fd9e6f0dd8e9acb8a0bbedd3bb1b058177a1af6a97b95e2bfca12b21b5b4f2ea12
SSDEEP

1536:M7ouMUKXpsHi1V0xf2rDR9Oz/tC4Ugf0iKXCzROLy37x80xsYtHSd2Rbh:pUK5sHWV0xf2rElCjI0iKyh37x80aYtP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b358ff75fa61e3c74006aa6cb5478f09_JaffaCakes118

Files

b358ff75fa61e3c74006aa6cb5478f09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e53049ab4018041a023e213923d79dc3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
_acmdln
_except_handler3
malloc
_adjust_fdiv
exit
_exit
fclose
strcmp
_XcptFilter
fwrite
cos
__setusermatherr
free
_strnicmp
_initterm
atoi
__p__commode
__getmainargs
fopen

kernel32

GetStartupInfoA
GetModuleHandleW
VirtualProtect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ