f5b4e057a7d5548d779ae8a9f7d89eaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5b4e057a7d5548d779ae8a9f7d89eaa_JaffaCakes118
Size

114KB
MD5

f5b4e057a7d5548d779ae8a9f7d89eaa
SHA1

e3399de7a6e710bb89c7d16139de535e81933383
SHA256

1647823bb1a7d5834d9629930d118e10f2eeee85bbc200ffd8598ae24e22293e
SHA512

6b150327de5f51190f49cee579cae0b9d418d52b8eee25f5126d07629808323711c9e5f1428eee2fcbed58b15f9b98108f29c6e4c0f537bc46b97f5668e4be7a
SSDEEP

1536:PJn+PgDeWFKaD8gqgxbYBq9lR1oou1gPl9SJzRFB9gV3swQuPGK/C+iOFebTgb7:PEIui8gjb1lRSsPlsSV3swdGirFbb7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5b4e057a7d5548d779ae8a9f7d89eaa_JaffaCakes118

Files

f5b4e057a7d5548d779ae8a9f7d89eaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e79b671899c53e4ca3f761f2b5b0023

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

FileTimeToLocalFileTime
GetLargestConsoleWindowSize
VirtualProtect
GetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ