309e4a68faaca2d19e17baae23cf1ab2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

309e4a68faaca2d19e17baae23cf1ab2_JaffaCakes118
Size

40KB
MD5

309e4a68faaca2d19e17baae23cf1ab2
SHA1

b07fe78b7784f6254d11e66e0affcd63a23cdd46
SHA256

d7b497e8931a9242288a9b1ee2c179d7a74d7e78f8b9bcfc7e0941256ee64f78
SHA512

aaf88ba65aa1883ad2e8ada853c4a72f74da22986beb21e505bc318ebadc2ddcb706cf0b6536f63d0c6cc31bdf65b53aefdf2904cd72f7835613edd16fa5ebb6
SSDEEP

768:xdBvUbs3k9OJAFKeQXlCocKeS0KZaI/QlYaKjBfyD8xmXjfNNnN/mZ:xdNCaVfarlYaKjB64xmb3y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
309e4a68faaca2d19e17baae23cf1ab2_JaffaCakes118

Files

309e4a68faaca2d19e17baae23cf1ab2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1872d09f33cb96df619fcaea44c37945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ