df03f0ca0a1d60af42016c07c0ed84f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df03f0ca0a1d60af42016c07c0ed84f5_JaffaCakes118
Size

163KB
MD5

df03f0ca0a1d60af42016c07c0ed84f5
SHA1

bd81d3aaf36b334cfdfc7214a07bf1d25f3804d9
SHA256

72c8bff29210886c7356487459506e2100679efe92bf9daad0d6d3a64643dc5e
SHA512

b3fdc7673dd72995c409bf902e7bb2bf679eb18327d2cdf586c17131b8c850e4f1dea071a4f82d1ecfeed4ddd473b3542cd1894e43a5d056ccffa4336ff620bf
SSDEEP

3072:U1ZLizrqIhkg7nrHHtX1wRy8QepuWgGl2otDsKPO4RVdsrsjqiuA:iZWzrqI/HHtXmR1pu+l9O4VdsojqiuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df03f0ca0a1d60af42016c07c0ed84f5_JaffaCakes118

Files

df03f0ca0a1d60af42016c07c0ed84f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ccf2f627edbc612299eaa1f01abdf13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetProcessHeaps
CompareFileTime
BuildCommDCBAndTimeoutsA
WaitForSingleObject
FatalAppExitA
HeapReAlloc
FindClose
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ