d3b0872c9e39c58ad96e7ae558c0d237_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3b0872c9e39c58ad96e7ae558c0d237_JaffaCakes118
Size

209KB
MD5

d3b0872c9e39c58ad96e7ae558c0d237
SHA1

c52667dd4006d1bc813c99177e6147e8da205a49
SHA256

7049b8905f5fb955835fc4b18a9522b0bf374eabb059201f5bbd918fdd74bae5
SHA512

186070076c9e5c8b2fc30e618df10bb42b21321836c8ad234548ef26e0d9fa1888ccd6f960bca4003db6d923772be2f1d1a7e87c6db6eef835d51697c00276c6
SSDEEP

6144:5Hm1Px0VqHCdvOWQELTj3wlBXfFEmalhPuRxFkGh:5G6Aa1QE73MBPFhalJ6xd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3b0872c9e39c58ad96e7ae558c0d237_JaffaCakes118

Files

d3b0872c9e39c58ad96e7ae558c0d237_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3da7db70825beceac5b42d64da5ffa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetModuleHandleA
GetStartupInfoA

user32

CopyImage

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ