JaffaCakes118_e258a261452fb567b9084a60a1bb82a8 | Triage

Sharing

General

Target

JaffaCakes118_e258a261452fb567b9084a60a1bb82a8
Size

31KB
MD5

e258a261452fb567b9084a60a1bb82a8
SHA1

b84ff6b40b8e2cf485ce8707bcb41ad55a16c841
SHA256

109bb2ffe135389b3d051302d4d38b6a6071b40b8f39971d73347e83a992860a
SHA512

dd28f8ea0704b618acac0b4ab86c5298cdaad32a970701d57010e02fc4b399bce328dc01dfceb8cb847393763ab1a83728ae122c51e85f02f7aa129449b287cf
SSDEEP

384:q6mgQkpqh115TGvx9Slq8XhMgKybBLu0DlyPtEr2obw91ALF67DJixG8rKlqAeNa:/m6pGsSgiKgxvDetEr2ocDALF401K1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e258a261452fb567b9084a60a1bb82a8

Files

JaffaCakes118_e258a261452fb567b9084a60a1bb82a8
.exe windows:4 windows x86 arch:x86

5c3be95c07e4e08b67726b0aa30088be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
SetNamedPipeHandleState
GetCommMask
GetThreadSelectorEntry
GetPrivateProfileIntA
CallNamedPipeA
FindResourceExA
WriteConsoleInputA
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ