c0d402743892bbfea1cac5751bd242e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d402743892bbfea1cac5751bd242e3_JaffaCakes118
Size

50KB
MD5

c0d402743892bbfea1cac5751bd242e3
SHA1

843972f6f68c2044971ab684120bdf622aecc216
SHA256

16ebc99d44e236c01b9ed244a98f165bdb6ec968a22b2cb8bfbf8d1445f8a537
SHA512

cac8aed2923101daaadfbe041d6c95754218f326c767fab23694c6e5b30282455e1d7fc0cea051671e3854c9a234b06ae10282c57607fa86e31041e1c528f965
SSDEEP

768:iz9m2onHZpDRMSGw+G7ju5tSknBKkyflQkAYbs9AnGTb4lj:i5m2oHPVd9Lj2Dn0kyakAYaOj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d402743892bbfea1cac5751bd242e3_JaffaCakes118

Files

c0d402743892bbfea1cac5751bd242e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47f25051b62f6512973e6b53d67e6057

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
HeapAlloc
GetEnvironmentVariableA
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE