f50a02126afeab000c7b6b4787a5da1f_JaffaCakes118 | Triage

Sharing

General

Target

f50a02126afeab000c7b6b4787a5da1f_JaffaCakes118
Size

81KB
MD5

f50a02126afeab000c7b6b4787a5da1f
SHA1

031098135727f0b31d6286313ab2832b62be9127
SHA256

bfd8a5fa595119d12879fdb4586babbb96d040e83fba217ae821f90041a7f3fe
SHA512

3d0c5a5cd1ecda59511de00742f27a5417f7e6ae3e5a9ab7c00a42d227652334b3db4f057906062fe2c2600f0c977bf9bce1a90e144f2482b0e84a52e8c027f0
SSDEEP

1536:af7kwckAFwmvjeQN1R1se+vlVksFIOqBB+EJ9BFd45EKIGrJ:dmJujHPd+vFFvqj+EJ9BP45SGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f50a02126afeab000c7b6b4787a5da1f_JaffaCakes118

Files

f50a02126afeab000c7b6b4787a5da1f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0aeac64485865f08f6a5df700b07a0f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
_acmdln
fread
fwrite
fseek
__set_app_type
_XcptFilter
sin
_exit
_onexit
fclose
strcmp
exit
strlen
printf
free
_adjust_fdiv
_initterm
__getmainargs
_except_handler3
__setusermatherr
fopen

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ