52a05c59502ec2c8c97be880b2979126_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52a05c59502ec2c8c97be880b2979126_JaffaCakes118
Size

10KB
MD5

52a05c59502ec2c8c97be880b2979126
SHA1

8e22981b658856dca6f52b3b63700fd8543e35b7
SHA256

7124e37b022b2fa4086e7ea30cf2872094adf574d5620ee996edbefff81f0526
SHA512

9a9c11b45c45d550495c46d1a8f7322a838867797db3f1ad922a187057140a339d1870f661939e03ff43625612ecb0bbf3f9881c9f5dd9cd30c7690873230f78
SSDEEP

192:/37h5mkiflfV50Bf2lP1oyAFCfpKgOFcfQ9ZuuOFK4fjNjzMz0:TW/fX5v1CFCf4gOFckOFKN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a05c59502ec2c8c97be880b2979126_JaffaCakes118

Files

52a05c59502ec2c8c97be880b2979126_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b212133c3b2187936f5bde2b6859b13d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
__p__commode
__p__fmodeFe�VW�vVx��pp_type
__setusermatherr
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memset
_except_handler3
strcmp
strlen
malloc
W�vVx��pp_type
strcpy

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
FindResourceA
LoadResource
LockResource
OpenMutexA
CreateMutexA
SizeofResource
GetModuleFileNameA
GetStartupInfoA

Sections

.TEXT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.RDATA
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ