cf99d178506fb36c5479fbc82ae587dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf99d178506fb36c5479fbc82ae587dd_JaffaCakes118
Size

60KB
MD5

cf99d178506fb36c5479fbc82ae587dd
SHA1

6a608b9f3f365e6bf71e96c822779a190b65a447
SHA256

801802668fb2e595d9388f04ef14a0d521389e5f027bc1d4a61b1600cc38eec7
SHA512

ad6789da606630206d67b3a11f1650415e54edfc2c61164f9cb5973b7821c473546c41dae5941f955d58a11ae9021ca7fc960c626ec64b4f6125ffe32f05529e
SSDEEP

768:nmG6qnKggezZRWYdoq6cN9CvgP3H1hLvbY5ND9Bwe2f+jRMjj5qGU37:nV1gezPWioq6gV3V6HPeGtMHxU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf99d178506fb36c5479fbc82ae587dd_JaffaCakes118

Files

cf99d178506fb36c5479fbc82ae587dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bbd25d71eccefd91099134d99fde4b13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetLastError
LocalAlloc
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

owjewyw
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE