11d72f37051b98023d0567b433e7a5ae_JaffaCakes118 | Triage

Sharing

General

Target

11d72f37051b98023d0567b433e7a5ae_JaffaCakes118
Size

132KB
MD5

11d72f37051b98023d0567b433e7a5ae
SHA1

0627c7e48055c6d0b23c5996d3f1a44ab44ef45d
SHA256

ab18c6af2feeeefdb3e28edcc7be4947b3e6c06c19cd10ad87e1af27125dd833
SHA512

f8af3820b517bc4d1c573933915c95f694c17b975ed03f96910294efda919ec27b8f9b507208e0d9cc7d829ff47b03a10e39326a206145797b8bde4f51cfbed1
SSDEEP

3072:NqLXni8scC6GnemsRiOu0EoFxdNq84bL3tltR:cLS8AcndNAtR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11d72f37051b98023d0567b433e7a5ae_JaffaCakes118

Files

11d72f37051b98023d0567b433e7a5ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1b803643bf877c3fcfb8c124c44489c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

tcl81

Tcl_CreateInterp
RtiTcl_AppInit
SetApplExecVersion
RtiTclConsole

msvcrt

__setusermatherr
__p__commode
sprintf
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
_adjust_fdiv
_controlfp
__p__fmode
__set_app_type
_except_handler3

kernel32

GetStartupInfoA
GetModuleHandleA

Sections

.text
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ