c20e1df83acb0bd6216cca78fa9ecfb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c20e1df83acb0bd6216cca78fa9ecfb3_JaffaCakes118
Size

9KB
MD5

c20e1df83acb0bd6216cca78fa9ecfb3
SHA1

05e45ea9a1bc421aa4e733035320c266f93146ec
SHA256

967e3fc03d0afd914817e69af3436eb788154269e5e4233918158373318d94b2
SHA512

111766bbfbd4460346b84be18a509c8cdf63717689e31150b4a82dd83f254e644b5369d144b4c2533494977913df1c3554dbe688f253dd9deca497ae3a4f1f04
SSDEEP

96:gX/BhbqmyIMuveqy5TuDk5um1JDXPtboyn:GNq5IMuvI5SDkRP1oyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c20e1df83acb0bd6216cca78fa9ecfb3_JaffaCakes118

Files

c20e1df83acb0bd6216cca78fa9ecfb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8502f220396f5d54cdceab12abfc4700

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
HeapAlloc
GetCommandLineA
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zdatz
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ