d5493b4831e6887062dafaa648cafa32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5493b4831e6887062dafaa648cafa32_JaffaCakes118
Size

251KB
MD5

d5493b4831e6887062dafaa648cafa32
SHA1

a410aa5ae916cfcb0fa569d19afcb345354d0f5d
SHA256

45f9d7ceda9e127365c1d804519a16c95b84d6b61896b816c19257befd9c474c
SHA512

9dcf5f76ca92e6046f80e5b536f399fd1e60453baf5a585d787abd41c7d3649273f3ae669376c90a678fb4f9f36bd253591e445a348804a07905b0f864479917
SSDEEP

6144:JA3aIOXPkgdN3msqhPNOkMvjKq0SamyZhHa:JA3ax8g1zujThHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5493b4831e6887062dafaa648cafa32_JaffaCakes118

Files

d5493b4831e6887062dafaa648cafa32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f07e88015d5897fe8f65f35211c5581

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

ResetEvent
GetProfileStringA
GlobalFindAtomA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ