dfe3d843e568cdae967fa1d541dac2d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfe3d843e568cdae967fa1d541dac2d8_JaffaCakes118
Size

16KB
MD5

dfe3d843e568cdae967fa1d541dac2d8
SHA1

4d75bd2b810366936f638343a1a918de61bca2f8
SHA256

25c992869dd57c169cfd896bd4874cefa05bd792ebe2c0ac75defb56a47a339b
SHA512

50b7dbd23f5f6d968f477ef33e000ac5140adb24d11fa8230ae4053383558c1d9207b621a2c214c1399bf426551c13a36085ac2c39cac1282cc2bfac04f3ac18
SSDEEP

192:qBQ921/vkmARCWgWsjP1oyn2608Y5BGZo:qBQI6dar186d+BGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfe3d843e568cdae967fa1d541dac2d8_JaffaCakes118

Files

dfe3d843e568cdae967fa1d541dac2d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cba6e04d5bb4bd8068b2de7c30751477

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
srand
rand
sprintf
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ