d9e868a6a47de2d56be38da6da9b84f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9e868a6a47de2d56be38da6da9b84f5_JaffaCakes118
Size

25KB
MD5

d9e868a6a47de2d56be38da6da9b84f5
SHA1

be4189df80de2a060b3446f3124e215213fe7da6
SHA256

49a8e5205bb32106b466b2891b389dc107ecedfd439d4bcb887de66eb34bc824
SHA512

362695d9cba266ab5d1e141d64a93517db6ae14da1559986b491aa72f87e400a489dc01d05d33f77d26d3a390ca815fe2bdf524e8f4ebbd4da3158c59de3971e
SSDEEP

768:Ny8gUp8xHd3wwSl5gAY2Jk1UyQj/TCGDlGZQvZiE3AM:Ny8gUp8xHd3wwENqCyA/TCGJGAZ3AM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9e868a6a47de2d56be38da6da9b84f5_JaffaCakes118

Files

d9e868a6a47de2d56be38da6da9b84f5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a8ae7489c8e18bd61313a47d51b9082

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
BackupRead
Beep
AddConsoleAliasA
AllocConsole
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__setusermatherr

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 699B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ