b92784a7656330cf4b6c19dc9a50c461_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b92784a7656330cf4b6c19dc9a50c461_JaffaCakes118
Size

65KB
MD5

b92784a7656330cf4b6c19dc9a50c461
SHA1

1e8dadc89d9c03d6981320a38033486abedfeb25
SHA256

4c515a957c6f18b41da877fb6dea816e9c21e31bab226e0ff80ea3fa01c60325
SHA512

285e88e744cb30365459beb32d127eef58faa7f533e7feec615f38f838728cf54c346cdb43d5a701d28ce649e1568a6797eed2c338c4e33773ef2d8116fb0d38
SSDEEP

1536:L1SWG/I60J8guubh/sfR8w3Bczd3GBhl5sR:JJGgfZrh/siwGzd2J5s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92784a7656330cf4b6c19dc9a50c461_JaffaCakes118

Files

b92784a7656330cf4b6c19dc9a50c461_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5a17013d439ea15ac63ad2625e451431

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
GetStartupInfoA
HeapAlloc
SetLastError
GetModuleHandleA
lstrcpynA
GetFileAttributesA
LoadLibraryW
HeapCreate
ExitProcess
WriteFile
SetUnhandledExceptionFilter
GetProcessHeap
SetEndOfFile
SetStdHandle
ReadProcessMemory
GetOEMCP

msvcrt

__set_app_type
__p__commode
memcpy
_adjust_fdiv
_close
__setusermatherr
fgets
remove
_initterm
_acmdln
exit
_rotl
_wsearchenv
_exit
_except_handler3
_XcptFilter
_adj_fdiv_m16i
__p__fmode
_inpd
__getmainargs
_controlfp

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ