d5b1792d30ecd8ee4ca808a5e033ce21_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5b1792d30ecd8ee4ca808a5e033ce21_JaffaCakes118
Size

128KB
MD5

d5b1792d30ecd8ee4ca808a5e033ce21
SHA1

2f5c81a3c7d9bb37ea0545ac1deb0ebe6e3b3cf0
SHA256

37223bccc7066fca46a723ab67385101505ea0421817c9ca72079df346c5018d
SHA512

25d6438f657331660005883e1610f89e4234ffe9855760e0f9ffbe13eccba021f1e2283b10ecabee4c9bbeb0545bbbe7fef252faa732ddbf11ac23bee95f7fef
SSDEEP

3072:MObo8URuxQfnX781wGIIK+PIPKNlzFVwcCsZ+gv6Pv+TR9GV:zbo8cfnX7h9OIPKLHZZ+dPv+T6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b1792d30ecd8ee4ca808a5e033ce21_JaffaCakes118

Files

d5b1792d30ecd8ee4ca808a5e033ce21_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d24c293cf1121b84aff6e1e2e82bb5c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

VirtualQuery
ResumeThread
GetProcessAffinityMask
ReadProcessMemory
GetSystemInfo
lstrcatA
SetComputerNameA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ