be58fe5663bf8d4fe5453d4724a99383_JaffaCakes118 | Triage

Sharing

General

Target

be58fe5663bf8d4fe5453d4724a99383_JaffaCakes118
Size

128KB
MD5

be58fe5663bf8d4fe5453d4724a99383
SHA1

fa9e7a1a8da4b604d723df6f083aa370bc296f92
SHA256

242dd662a417733f728c3e5321523e31f4576c946b196e28d0f52172e36350f4
SHA512

3ebb9261b34af756088b915a2a8a5358d8078fe03380b13a633e527eb6bf2f7803b0b3e9927ce818dcc490b6547b86f5b412688b98f9d33a2dd61e49db6c4a01
SSDEEP

1536:h4HGl6RAIZT6Xg6Nb/mynA0qmCNXBr8hiOTYZae/PDpc9j33/AIzseq/gfq6ebfG:h4Q6RAIxza7mgA06Nx8igS3qDlygsfYB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be58fe5663bf8d4fe5453d4724a99383_JaffaCakes118

Files

be58fe5663bf8d4fe5453d4724a99383_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63634e9187acd547fc4c9e70a4790e92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetModuleHandleA
SetTapeParameters
FreeEnvironmentStringsA
GetExitCodeProcess
IsProcessorFeaturePresent
Heap32Next
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ