1346a11ea9478ca02664e66f82646321_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1346a11ea9478ca02664e66f82646321_JaffaCakes118
Size

28KB
MD5

1346a11ea9478ca02664e66f82646321
SHA1

fed04355c9d3e23c2df48a61b5b1db25e4a01b7b
SHA256

0cfb581ca37592ef4e35b5083c6719a28e763178e90b3105e3724c1a540309b6
SHA512

0acdccee701823e53c0581be020541ad80de61a5a7b258c052536e41e282fb3cb52954e5d00a658b274945a50b5ce1d20857bc5a9e290b41a8a8aee4eb73c707
SSDEEP

768:W2RqhUydH/EzPIiQIEpR7AHBz3GIMAz8qnjP:W0WUqazQ9c5VMAzHnjP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1346a11ea9478ca02664e66f82646321_JaffaCakes118

Files

1346a11ea9478ca02664e66f82646321_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c57f3fd96ecfc1bc3962f18bc9679f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
CreateThread
GetStartupInfoA

msvcrt

memset
strcpy
_exit
_XcptFilter
exit
_except_handler3
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_acmdln

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ