cf038194f0fe222f31ec24cb80941bb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf038194f0fe222f31ec24cb80941bb1_JaffaCakes118
Size

80KB
MD5

cf038194f0fe222f31ec24cb80941bb1
SHA1

f3f306d9dfe8193b9e9d91ca27893c3a9866a7f9
SHA256

324ff0da6ada98432ab56ea4ffb5226db818b180e5fbd9bbc7764010642c8f19
SHA512

7407a4c1bea0f5387728d0f4d8e5c52ba1a6b5a695647d26fea74ea7d42ef8076de8997336091cc862250527dfbc09198a0ddca51655bd5f45e9acc56700ea5b
SSDEEP

1536:Jiuon3IwSK5sYy4fhY00nyRQd9KlQu526:JM4wSmryQhY00Y3QN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf038194f0fe222f31ec24cb80941bb1_JaffaCakes118

Files

cf038194f0fe222f31ec24cb80941bb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc2a55315e6be57c73f2245f0ea385a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
VirtualAlloc
GetLastError
LoadLibraryA
OutputDebugStringA

msvcrt

free
malloc
memset
memcpy
exit
printf
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE