b5d7f0f9d533632a4f6ffbbb4db522bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5d7f0f9d533632a4f6ffbbb4db522bf_JaffaCakes118
Size

92KB
MD5

b5d7f0f9d533632a4f6ffbbb4db522bf
SHA1

d41cb9e1fd63f97131851b443ed6b8cd3fdb6466
SHA256

1edf2e71a939bff84b2927245c71d83d48c9d54263823dc96db366edab4e89a9
SHA512

434188dd81217c8f31d3e87aab74784e8aecd74c632a6251925cb1b067f8ced0aab5f2af0a238777a1a9fed2ff499db3c74d11caab7e7fc107ab911751e9de67
SSDEEP

1536:WymVK3eyPjtpzHZddDoQIb2P8TJ2DnJozlYdRgZiyMlxLwzVp2x44izn9I2DnJ+C:ZmVK3eyPjtpz5AQA2PCJYnCzlegoy8x2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5d7f0f9d533632a4f6ffbbb4db522bf_JaffaCakes118

Files

b5d7f0f9d533632a4f6ffbbb4db522bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d368fdf14cdc8f40d1dee0172cb9a59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

GetModuleHandleA
SetCommMask
PulseEvent
WaitForMultipleObjectsEx
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ