f652ba791f43b493583cf6fb2bda3744_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f652ba791f43b493583cf6fb2bda3744_JaffaCakes118
Size

216KB
MD5

f652ba791f43b493583cf6fb2bda3744
SHA1

d0d2d90ae8720e42d8cf6045a4129c09b15ea2be
SHA256

e7f35cc24d084d550ce65efa45c5d30f403ff12f6fc9baa8b3542d252173a27d
SHA512

77e8455a8a0a65a95dfb796252fbe55bf6737e3916c8ee5c6c19dfa9ac72dcb66036d65be6ccc16b7511ceba182676eebde177fc8db33b1da539db8fc3ce29fe
SSDEEP

6144:dF8TPOE2eKdr03wNUDB78pWQ/Ch0SVK5ZtuQxPICphHY9:daj2eKdrz+B7C/C6SoZ8QxQKhHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f652ba791f43b493583cf6fb2bda3744_JaffaCakes118

Files

f652ba791f43b493583cf6fb2bda3744_JaffaCakes118
.exe windows:4 windows x86 arch:x86

742d5b2827e00638b5958d0637f74dbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
CreateFileMappingA
ReadFile
DisconnectNamedPipe
WritePrivateProfileStructA
GetProfileStringA
GetShortPathNameA
HeapUnlock
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ