d0b2b7a6d20ec61ea0ae8b121ce695ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0b2b7a6d20ec61ea0ae8b121ce695ea_JaffaCakes118
Size

89KB
MD5

d0b2b7a6d20ec61ea0ae8b121ce695ea
SHA1

14ad3fa13bba7414dcf7b75416a0f0e7e30e8b91
SHA256

cd9b93320eb2bb389674aae5ee1f5550ef3a9d38b8b5c0e6e656723d505a1824
SHA512

23810cc4a9ae8b1a6d64083a96805a30ab3a7f773b7829229d924b97102455f3ecfb0d00dbfade30a17010a2b8f62eba177194cb910694e504904e7f917e5034
SSDEEP

1536:5ddp02JKiqcbEyHcrfWkxUKn1a7sPo7hJXFpW9RqjJnP:5ddPJKobkrvUKn1agg7hJVY4JP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0b2b7a6d20ec61ea0ae8b121ce695ea_JaffaCakes118

Files

d0b2b7a6d20ec61ea0ae8b121ce695ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1872d09f33cb96df619fcaea44c37945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.TEXT
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ