c29321d054a85bab62d96cc752f92e6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c29321d054a85bab62d96cc752f92e6c_JaffaCakes118
Size

16.3MB
MD5

c29321d054a85bab62d96cc752f92e6c
SHA1

cb165b45fb9ecab1805b413ace7236eeb28c38d2
SHA256

4334e538f4845f4fb9bcc0f4384009f1acf4e455a81d16a0dfc353d5c8820d73
SHA512

57227c7a8849c6fc56b2db1cd1e4f8806c028ada7231053c24e3b2328fa06abeafe5a5a1a890605905f6079131240dcaa643e3fa3008c4410a7dd74ca2bc0443
SSDEEP

3072:Wm+F5wUfxSkUFCjEyOb9i0JPnTwHE/QqsZu89aL8aGj1TTwAhBZiL2H3zwWt+jJW:Wm+bQgjydKmDvX170

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c29321d054a85bab62d96cc752f92e6c_JaffaCakes118

Files

c29321d054a85bab62d96cc752f92e6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ecc21bc913e5e1893521003ea9bcd99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

_exit
_XcptFilter
exit
_acmdln
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ