c121ca102cf39af0f68adf6dbcd42fec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c121ca102cf39af0f68adf6dbcd42fec_JaffaCakes118
Size

440KB
MD5

c121ca102cf39af0f68adf6dbcd42fec
SHA1

3519afb68707256e269dde23baa0b213a7736490
SHA256

b99d1edbefc23ceeb067bad948745232f54eee5ce2bfc540fac6ac1fe6a64dac
SHA512

7ebbb88d8138af95d929967bf12317b4c1b43eb8c0940027ade7d1c17a48e3a2aa8a8e7fbb138e8d4904321e55e764018dce39beccb059929910e2f3c60a9586
SSDEEP

12288:XbQQZ5fDEO1ugKa6wYCi2yCoI+xtGOoKF6EXFhE0ifk:X7ERAA2yCoIGaxOifk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c121ca102cf39af0f68adf6dbcd42fec_JaffaCakes118

Files

c121ca102cf39af0f68adf6dbcd42fec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

af6826194fab238ea1c9a0bf80562592

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
LoadLibraryExA
GetTempFileNameA
CommConfigDialogA
InterlockedIncrement
HeapReAlloc
SetComputerNameA
GetStartupInfoA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ