06cced4be70d1054ca45eb1f91b0fa4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06cced4be70d1054ca45eb1f91b0fa4b_JaffaCakes118
Size

114KB
MD5

06cced4be70d1054ca45eb1f91b0fa4b
SHA1

05d38805f67d4d8be33a65dc6c6e7b25def13df3
SHA256

01d3ab5cd0d1b31993f66a9ae763b6018e88d73ab615095dd4f776d991094da8
SHA512

7d2fc97a22b18429af8514ca606d0777cb4e64005ce9985d7a196821fafcc765a9f8335bd4a75b6ade9ec93bb6c3623071fa2a13d6733b5df525d964f944a04a
SSDEEP

3072:VQxfcWi8usWSjvrC9uHwgzV+vlIW3z6/japsF/x+lN8Aye:VWfc8ljrC9uHwgzV+vlIW3z6/japs1xW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06cced4be70d1054ca45eb1f91b0fa4b_JaffaCakes118

Files

06cced4be70d1054ca45eb1f91b0fa4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

26388d99f31b2e42f95fc2e368bdabb6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
__p__commode
strncat

kernel32

GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ