bb4b63940d94b027236b36f16d97aa98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb4b63940d94b027236b36f16d97aa98_JaffaCakes118
Size

363KB
MD5

bb4b63940d94b027236b36f16d97aa98
SHA1

0e0a656ba3593af3a7943ea040851754e2def1c4
SHA256

a3a0fabcbf37e100ae444f98739222a4c9995e28d8027251fac04fd10a078d47
SHA512

47d8298bc512a81c93d88df08e8b1e26bdc5e2946b37e96aac327dc56341502bb335fdf29585a9103012925c8abbebfcfb56a7baf1840b55cf8bf4877f3b4e21
SSDEEP

6144:0QVMOtTBeI0a7dPOgy5YMuV3OJgp9WO9fiKQv2AMvSkGy0by49ufpXB5H:TeOtTd0asbxSOO9fi5vrMpB0b/6pR5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb4b63940d94b027236b36f16d97aa98_JaffaCakes118

Files

bb4b63940d94b027236b36f16d97aa98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef951f8122facf2a1684191f27e1fa0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_except_handler3
malloc
free
_exit
_XcptFilter
exit
_acmdln
??2@YAPAXI@Z
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
__getmainargs

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ