52cb41f63505f9bdfacc624830a6c607_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52cb41f63505f9bdfacc624830a6c607_JaffaCakes118
Size

259KB
MD5

52cb41f63505f9bdfacc624830a6c607
SHA1

3432f10bfb54efcd3dd40d9fc985ca8f2798ee8a
SHA256

7806a4e0c9d076509e0c1004e042a83fdfa15f9ea9a8bcf1e4a5b6b6ac0ffd0a
SHA512

76896cadc828f9a35f9856a41d979d58b00d170c488f3d79b97cb8fa327741adca1c62662dcab1da98bbd00dacd7c8f2d817ebd719e3e3ac01055b3c6d710658
SSDEEP

6144:LG2InZdjWpmLyrSBPGawfp+ed0LVSvFtPyV5FoELpx:LczCprGNE+euLkvFtqV5Fogpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52cb41f63505f9bdfacc624830a6c607_JaffaCakes118

Files

52cb41f63505f9bdfacc624830a6c607_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efc4e2b1a3f42bcbcff74a2290441ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

malloc
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2

kernel32

GetSystemTime
GetProcAddress
LoadLibraryA
_lopen
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA

user32

IsCharAlphaA

Sections

.text
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ