b4e7a7fab3f5f9d2ffe0a3d7e696c6db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4e7a7fab3f5f9d2ffe0a3d7e696c6db_JaffaCakes118
Size

73KB
MD5

b4e7a7fab3f5f9d2ffe0a3d7e696c6db
SHA1

e5ec11be850361c23d539227bb969f34110e713a
SHA256

e701c23b9675cc747dcf54653927c891e00a8bbb844307298648b8f15cfee759
SHA512

123ddb3f91b5588fe47ea058c4804a9cbe3ad8f2b836e00e05e4571ee94d4375a836d2ed87ae9f1499a8226c56b9d5fc5fa33cba07016c7a38762adc95ef6335
SSDEEP

768:R2nL3Q2jZN5CgvMHpUuwp8mjz/TahgZI8EX+OunSWEpvtHJWcxYY4ctqbMe16+na:R2Lg2T5HgpUuAf6RRJJWWH4ctFJ9SU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4e7a7fab3f5f9d2ffe0a3d7e696c6db_JaffaCakes118

Files

b4e7a7fab3f5f9d2ffe0a3d7e696c6db_JaffaCakes118
.exe windows:1 windows x86 arch:x86

90d1a5bb5286b60ef0094aec8654b2ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
HeapCreate
GetStartupInfoA
SetLastError
HeapAlloc

msvcrt

_controlfp
_initterm
_exit
__getmainargs
memcpy
_XcptFilter
__p__fmode
__set_app_type
__setusermatherr
_acmdln
exit
_adjust_fdiv
__p__commode
_except_handler3

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ