ced6c4d93f99053b8c0070d983786a5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ced6c4d93f99053b8c0070d983786a5c_JaffaCakes118
Size

151KB
MD5

ced6c4d93f99053b8c0070d983786a5c
SHA1

3a3f15b46ced92618a14379fc1e12b3519ad0445
SHA256

a4df3616955c563ed47a0a1a798bc7be246112f41166ccf9cf4e3eeee7a202b4
SHA512

7cd7695ecbd3899cca13ef0af5298eedcf2573dacc53c90bc67d25543210790ce11b2b6032712a10428c72ddbcdc216d650a86d4c0395fdd1f9560207db9df78
SSDEEP

3072:EpKRYdXvZG31F/nXvTOY1SETj5DJNnkstxpVx9bztRHFbLuMPDUHRgL:EpaYcX/fSQSET7NVx9fF+MPYxgL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ced6c4d93f99053b8c0070d983786a5c_JaffaCakes118

Files

ced6c4d93f99053b8c0070d983786a5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

12c309d394b87ab15e820feef161ebb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetNumberOfConsoleInputEvents
OpenFile
GlobalMemoryStatus
FatalExit
CopyFileA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ