ded2a481a50e40161c093502d12fad3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ded2a481a50e40161c093502d12fad3c_JaffaCakes118
Size

416KB
MD5

ded2a481a50e40161c093502d12fad3c
SHA1

8e83e7eeecb567b57423a6c0a5755f6c7ec3ead0
SHA256

695fd0e584e83846c7c4520a525e7851c332a76d93d4edc32318b83658a66437
SHA512

1cddc8eb310a6fe10d74f723fd584c6008474dc62377c464842c00b8937e28673b551081c4638a0ebec862fee301ddfaf4949686afb6d9db7e7032012ef7e7ef
SSDEEP

6144:AN8T1KdhFdlpMaYuC5gH4OID9/P36Mn22Pwdi6gEEljLRZG2A7+hoFE9dOHQhK5n:g8T1+hFd7M8ELRH6THL8j1ZBA7PH4K4u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded2a481a50e40161c093502d12fad3c_JaffaCakes118

Files

ded2a481a50e40161c093502d12fad3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce3e50e5902115a3563c19df345a5701

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
BuildCommDCBAndTimeoutsA
PostQueuedCompletionStatus
DefineDosDeviceA
GetSystemInfo
WritePrivateProfileStructA
HeapFree
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ