0465e1eb429643c3940a17b5d7aa0581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0465e1eb429643c3940a17b5d7aa0581_JaffaCakes118
Size

2.0MB
MD5

0465e1eb429643c3940a17b5d7aa0581
SHA1

b590f27ea7c48faf2ec95486c41ab969161fcba3
SHA256

c15a52f8d48a6dca1c7bc6117a8618e65a61c9146eab7436063f4e7f61ac729f
SHA512

32a3eebe85fbe8f02224c93e492326b03cae0f8acc3b13baf2d9dae67bba3511846d27636298dcb0a297b91d264b0e86b0ecd48af99054ed6fc4e15c48642c28
SSDEEP

24576:2Jx6siWNtGq2mkYNfXJrAyMikUtXwSYz7If:2JPt0CfpAyMdU5mA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0465e1eb429643c3940a17b5d7aa0581_JaffaCakes118

Files

0465e1eb429643c3940a17b5d7aa0581_JaffaCakes118
.exe windows:4 windows x86 arch:x86

34aec9074774a6621b2f84169c948803

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
GetModuleHandleA
GetVersionExA
GetFileSize
LocalAlloc
lstrcpyA
GetCommandLineA

msvcrt

_XcptFilter
__setusermatherr
_exit
__set_app_type
__getmainargs
wcslen
__p__commode
memmove
__p__fmode
toupper
_except_handler3
wcschr
__CxxFrameHandler
exit
rand

Sections

.text
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 999B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE