c934b08f755baf5b1a71450c2ec4fbc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c934b08f755baf5b1a71450c2ec4fbc3_JaffaCakes118
Size

28KB
MD5

c934b08f755baf5b1a71450c2ec4fbc3
SHA1

29acb2dc2250e75eee9162512225620bfcf4958f
SHA256

393823d735418e2e3ee0d10f1d0232ee5cb6ceb3db7a2cb81ee0c5cc3b5dafef
SHA512

d6eab68c3d517650a371b8505cf9814a6dcb27bc2efaebcec0da35fadda8906ae8b3dbd4bd53d8adf613f17c5e1217d3767608e7bafa283036f5526b38c6f091
SSDEEP

384:03pGHa7K3N1x8P+d8bTaFVM7HC+3VTu1Qunvk55aQWFJCgenAbI9vYuIsPxaVf:kGHTxf63mACEk7nM55hWFolYuj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c934b08f755baf5b1a71450c2ec4fbc3_JaffaCakes118

Files

c934b08f755baf5b1a71450c2ec4fbc3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

604a18dd49c58c7d1d61a45f13adee2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime

Sections

.CODE
Size: 21KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tasm
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tasm
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NewIT
Size: 512B - Virtual size: 201B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE