04639ae4c74daf7c6ff5a6d925c8752b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04639ae4c74daf7c6ff5a6d925c8752b_JaffaCakes118
Size

16KB
MD5

04639ae4c74daf7c6ff5a6d925c8752b
SHA1

4fc1890ea6c7026c1ed6d4eeeaacdfbb5d57cdba
SHA256

bc56b0ea238a8c41706b06721da78ec022ac3cf669c46979e3d2a293fd989519
SHA512

aa20388e9ab0e55b553a160eed8f5b073d5597f608d8c297558da2586d6d5324d06ff1d89a26518c7fdfec7d2b2ed982384bd35e7911698b66226c2ffe614c23
SSDEEP

48:qBAXQQHLH19cFy7TER/KRBVPjm3EmbJmDwAoqP4oyl110T+KqERWfSlIm:tXRbrER/KRDPSRbJmxoqP4oyn10C0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04639ae4c74daf7c6ff5a6d925c8752b_JaffaCakes118

Files

04639ae4c74daf7c6ff5a6d925c8752b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4c16f3d68e73dda9a95e72c64e6973b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libmx

mxCreateDoubleMatrix
mxSetClassName
mxGetPr
mxCreateString
mxDestroyArray
mxGetNumberOfDimensions
mxIsFromGlobalWS
mxGetString

libmat

matOpen
matPutVariable
matPutVariableAsGlobal
matClose
matGetVariable

msvcrt

_exit
printf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
exit
_XcptFilter
__getmainargs
_initterm
__p___initenv

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WYCao
Size: 608B - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ