c9363d9f7cf974abed404e96aea42b7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9363d9f7cf974abed404e96aea42b7a_JaffaCakes118
Size

4.8MB
MD5

c9363d9f7cf974abed404e96aea42b7a
SHA1

711d79803f2aa7e50b23de2fe0bcb9feb340e4a6
SHA256

24a07f371b1770fb5d591617ed408b62fb6625987fadc35ba8b2681736d57104
SHA512

e1299c9645201956718b05ec2a4816352381125367c107952134d639b3631d4a7c69d8f26080d12abc6c4d191300dbbd3a47fae66f999189173bd95fd41d7b1f
SSDEEP

98304:WywIOwtoEhAAQ5xfMKS6yEpry3Awsj6M9qahSDqaW/:WywQtoh5ZMzBAwsuM9qHqa0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9363d9f7cf974abed404e96aea42b7a_JaffaCakes118

Files

c9363d9f7cf974abed404e96aea42b7a_JaffaCakes118
.exe .js windows:4 windows x86 arch:x86 polyglot

78b378922ea10fe716a2fb5f8b74a334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

strcpy
exit
system
strlen
atoi
strcmp
printf
strcat
fopen
fgets
feof
fclose
fputs
fseek
fgetc
sprintf
fputc
_unlink
time
ftell
_controlfp
__set_app_type
__getmainargs

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE