b75994e3b5d57ac98c5adbbf7f4f9fb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b75994e3b5d57ac98c5adbbf7f4f9fb6_JaffaCakes118
Size

85KB
MD5

b75994e3b5d57ac98c5adbbf7f4f9fb6
SHA1

3b02fe8f6d47302c5a0f0817407b867257190a98
SHA256

b79c23f47c319c618a618f564abe1575420b00b14d1bb4deea850284d7efca65
SHA512

87dd5a7e809246cea8658c0fc7ba552f6fac6fe47e9c5f91c4fa03d6ff61e328291551694a461c9f4ba79632abed3346a8be6561abb625b7e8797bac068b48da
SSDEEP

1536:bBYB2B20xIeAp6M/z92UCjuZPeJzkhKIvTL/3TpwGCrilN5WVNLTDE:9rKe86MwjWPDhKQTLaGX5IhTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b75994e3b5d57ac98c5adbbf7f4f9fb6_JaffaCakes118

Files

b75994e3b5d57ac98c5adbbf7f4f9fb6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9eb7f40b091217fa8f14ecf27e955744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_acmdln
__p__commode
_except_handler3
__set_app_type
exit
__p__fmode
sprintf
_close
__setusermatherr
_adjust_fdiv
_exit
_mkdir
sscanf
cos
_initterm
malloc
_XcptFilter
free
_pctype

kernel32

RemoveDirectoryA
GetModuleHandleW
GetStartupInfoA
Sleep
VirtualProtect

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ