4610aed101198547c6d77cb36c60f0cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4610aed101198547c6d77cb36c60f0cf_JaffaCakes118
Size

24KB
MD5

4610aed101198547c6d77cb36c60f0cf
SHA1

d74c3671889ecf4a21ca6fed3f4b70728157fed5
SHA256

9ff2c1554d98ffdfabb43d12d135e80ee0c0c53cf0da1e4eac4da7271486870b
SHA512

ed9df8819ec7a399b78373346c3d9de43764b4261f2f7d85295d52f4346be1ef798f8cefe6e85cc8e5c0246aec4865b26444c2e6f4644b6cde3bafc8df36d5ae
SSDEEP

192:j53+9C9vkGwhaWCsACjP1oyn2608Y5BOMBHY8GFhv4VOrn0Gye7:F3+9b11Pr186d+BVBxGjQVOr5ye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4610aed101198547c6d77cb36c60f0cf_JaffaCakes118

Files

4610aed101198547c6d77cb36c60f0cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cba6e04d5bb4bd8068b2de7c30751477

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
srand
rand
sprintf
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/GROUP_ICON/101
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/MANIFEST/1
.xml
.rsrc/version.txt
.text