b92e611c02a32f964369ac784cbd5091_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b92e611c02a32f964369ac784cbd5091_JaffaCakes118
Size

24KB
MD5

b92e611c02a32f964369ac784cbd5091
SHA1

824008702f428ff4b8cc4fa128f15dddc1c58a67
SHA256

32f3f47bf4657fa1e46cda7d15d946836052442ef429dacc8ae533b7c208059d
SHA512

762e0a6a8f3b98e056dd1836f0a57eac3df7196aed5c107d0b82c176893fc717ef6f45d6c2eaf545591c78ad854e3c8239dad5913e903927378c298bf1a26523
SSDEEP

192:/zFbX9aEebQWDMJervllVSRNpO/RhrMsvnEqb7RJUkI/Cfgg82VUnh/LQSM:/F3ecEtWR3KBnRbE/Hg9WRQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92e611c02a32f964369ac784cbd5091_JaffaCakes118

Files

b92e611c02a32f964369ac784cbd5091_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0865c69e989d5fe4474828a15a3139de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ReadFile
CloseHandle
GetStartupInfoA
GetModuleHandleA

user32

EndPaint
GetDC
BeginDeferWindowPos

msvcrt

_initterm
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 97KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ