52a08fcc042d0e225485f5d26a716dc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52a08fcc042d0e225485f5d26a716dc8_JaffaCakes118
Size

2.6MB
MD5

52a08fcc042d0e225485f5d26a716dc8
SHA1

b7c02cbf360c5787a85f649de73c3f783974280a
SHA256

01d551c9f5d99575daac5ad2ed1d6e83dcce711e95f0eacd02b98f3bb8272773
SHA512

91a159bb350efeb9109f24827e93f5fccc8673669a2713510ab7eede057fe008fb183c31e1ac0bbd5e945d7d296c98d0f126202969f2a32d716c41f391ea08ed
SSDEEP

24576:Fb3ndex8+wZ0k9Y5RhCxErVtThrVAOht3Q97+4VpCI82su9QCdxCZJSFqcrmnDch:p3d99YFCxEXlOU5yALcjcbykVSSwWC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52a08fcc042d0e225485f5d26a716dc8_JaffaCakes118

Files

52a08fcc042d0e225485f5d26a716dc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58b4eddef92ce4f55cda1c508ad024d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
IsBadCodePtr
GetCurrencyFormatA
LocalUnlock
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ