de1fc814ba2683775a831bed69e9074f_JaffaCakes118 | Triage

Sharing

General

Target

de1fc814ba2683775a831bed69e9074f_JaffaCakes118
Size

11KB
MD5

de1fc814ba2683775a831bed69e9074f
SHA1

1b0b1f0ac35e81d39e31bf7c3cb8de5606aa123f
SHA256

a02559f03074d81d19035bd821d97156fbb73f1527049ea5090a31b67ffcad1d
SHA512

a6a8406451ea257d094ab3cc418a3e0790aac91f45f3ac0c69a5ceba56e4c6886e7653176ef0767a96168deced9d5c56f2ee314017c845e1e66e89f29f8e5f9d
SSDEEP

192:Do8efqzUVMfCWrmOP1oynPhb5t+yuORALyNfC1sDs693Z:cBAUViRrm41Db5UyucxsiJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1fc814ba2683775a831bed69e9074f_JaffaCakes118

Files

de1fc814ba2683775a831bed69e9074f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2aa190280db147fd4cb8c6abcdd38bb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ