e0413c32ac7d3d0c80bd3dd6a193ae8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0413c32ac7d3d0c80bd3dd6a193ae8d_JaffaCakes118
Size

25KB
MD5

e0413c32ac7d3d0c80bd3dd6a193ae8d
SHA1

e7f8130411472d8ecab8e137cb38805006d30d9d
SHA256

84dc96a03b19f959fcfa5861e3b3a33e1492bdfe4334a0fd4729a1dacf825975
SHA512

5fa74126e8584f64265126f16025a03826a8263cfc41be0bfcb7896e2de5b17c7fd12b3b4f76ff62b36a881b5a1fcc4a5a75bd369f6bb01b9db6b524677348ea
SSDEEP

384:JCfOaEu+/N1RnDm7Dr77wybd2JFpaRABgDAGCIUyb7WfPm4OJUyVLH3SyHg:JkOUCdCPrx0LpUOyb78+nUyVLH3SyA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0413c32ac7d3d0c80bd3dd6a193ae8d_JaffaCakes118

Files

e0413c32ac7d3d0c80bd3dd6a193ae8d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a8ae7489c8e18bd61313a47d51b9082

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
BackupRead
Beep
AddConsoleAliasA
AllocConsole
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__setusermatherr

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 699B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ