002bcd136a3e3a2503f87dbba04172e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002bcd136a3e3a2503f87dbba04172e6_JaffaCakes118
Size

25KB
MD5

002bcd136a3e3a2503f87dbba04172e6
SHA1

855fd4eb30b6e3298032a244f67df3df44357b53
SHA256

d7a021c4c86205e54817c0ad8f732ccab1211e9ef118db8831bc34a9faa06323
SHA512

d8749f121f6968d9979872590189e5e68d1c32b2979046d5cefcebb8dfbe3a5b0594e3d7502861199882d9a3c48420bc9075002f282a37d249481ac412dcb2a8
SSDEEP

384:/jtdQGd1INmWvQshumvxBOLKMCFA1bRTE7+ZUqsWe4tYtOazMT2tsef5JRhV:LEGd1Jehpv/K58lUY8SqGX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002bcd136a3e3a2503f87dbba04172e6_JaffaCakes118

Files

002bcd136a3e3a2503f87dbba04172e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a8ae7489c8e18bd61313a47d51b9082

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
BackupRead
Beep
AddConsoleAliasA
AllocConsole
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__setusermatherr

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 699B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ