524e2240359d70530a71bef0f4d55bb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

524e2240359d70530a71bef0f4d55bb8_JaffaCakes118
Size

250KB
MD5

524e2240359d70530a71bef0f4d55bb8
SHA1

86ffd7b36712be1a95930be5c53180c40c4aea10
SHA256

b8edbf8e9487e1befed6d01cfe31b5167ff478210ef1cfab879c0cf6cbf8dfb3
SHA512

3aef1c000e68100da8b19f873896e325fdc789db9f2d5be67ed0e3ad0119841ae9be8c4029dfedf1ce05f8e2f7eaf1a7310a1894da5e6f0e1553d9d50c25abae
SSDEEP

6144:42InZdjWpmLyrSBPGawfp+ed0LVSvFtPyV5FoELp6:2zCprGNE+euLkvFtqV5Fogp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
524e2240359d70530a71bef0f4d55bb8_JaffaCakes118

Files

524e2240359d70530a71bef0f4d55bb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efc4e2b1a3f42bcbcff74a2290441ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

malloc
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2

kernel32

GetSystemTime
GetProcAddress
LoadLibraryA
_lopen
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

user32

IsCharAlphaA

Sections

.text
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ