c285c9f56e341d1cff0e03506ac4ec12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c285c9f56e341d1cff0e03506ac4ec12_JaffaCakes118
Size

103KB
MD5

c285c9f56e341d1cff0e03506ac4ec12
SHA1

4e283752726f1b97f968400cd2a9a7c43f5dbcb6
SHA256

61b4c6b830da1ec9fbc66f565aba087f7aa77ade0bec4e9ae6297bee7edd0070
SHA512

968e0816fbb18ebe632b6d0f25653fc96e1285595b547e730ede147a5097f0e062f89a85be050a557995f230e8334b030addfacc808d1a9ee2ac72dfd1a3deb4
SSDEEP

1536:EedyQZWKpz/Ce7QlmRlpeWeJHhHR9d+9dwo2H9dbPycfOAkkAYACQEr:EjQZPpVQlmVkhHR9U9Te9yAkBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c285c9f56e341d1cff0e03506ac4ec12_JaffaCakes118

Files

c285c9f56e341d1cff0e03506ac4ec12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

67377b3087c5ea6d64a2a48f36bc59ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
SetConsoleCP
GetSystemTime
WinExec
HeapFree
GetFileAttributesA
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ