cf308e0b6c92099c42c926cb672c0a23_JaffaCakes118 | Triage

Sharing

General

Target

cf308e0b6c92099c42c926cb672c0a23_JaffaCakes118
Size

171KB
MD5

cf308e0b6c92099c42c926cb672c0a23
SHA1

c67a8abc1733f1c333cc074259aaf08b87be739c
SHA256

831047a654fe7a0d0123045af7542308088e12e9eb9a16fae3af732c9910b253
SHA512

60e1a3ef7fcfb0a0ca221cd33ac84050603e3a27b392fdf7978ef91ac71cf348d1db2c38f87e239fb5590ef796ece462530c130a040f52f7aa06d649dc3a353a
SSDEEP

3072:t7LW0x9PxXROAWbUVdv27CobYEN0Cg8skUwoHcMnnnnnnxUh1uN/nnngnnnnA1nv:t59PxM5bod+16CskU7HcSUhQNr62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf308e0b6c92099c42c926cb672c0a23_JaffaCakes118

Files

cf308e0b6c92099c42c926cb672c0a23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f007ce2680bc8147adc2f4e0aa38739

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

SetTapePosition
HeapDestroy
SetEvent
GetProcessVersion
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ