ce8757c36456b409c45e78ba5fe79b73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce8757c36456b409c45e78ba5fe79b73_JaffaCakes118
Size

28KB
MD5

ce8757c36456b409c45e78ba5fe79b73
SHA1

e35a956fa6591eb4e66d978107531c9aa018c4ff
SHA256

fc391a3989ed5dbc7620c61b0cb483f673a0897234561fc6b93a97f40c29a3fe
SHA512

92263f8036f00d888f9ca2b3ee121e0f51e845114ff91e3bbdffeb2a96a72937795f0187a6530ba93d7e54f69fb08a82f3aedfea3b2e13a4dc888dd67047e3c7
SSDEEP

384:1mtHMzoYv0ydWsLD1TEuC1qnNZg2ToM7ThKRV87qPG1Tx6LPna1w8:MtHsosfWk1TtnNzTXpKRV8uPQCQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce8757c36456b409c45e78ba5fe79b73_JaffaCakes118

Files

ce8757c36456b409c45e78ba5fe79b73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79447b4ce0101f4e853d09a6c2e05572

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
VirtualAlloc
LoadLibraryA
TlsSetValue
BackupRead
TlsGetValue
GetProcessTimes
EscapeCommFunction
GetProcAddress
GetStartupInfoA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ