JaffaCakes118_4d0a05763f2b604005a80fe763bb8f8f | Triage

Sharing

General

Target

JaffaCakes118_4d0a05763f2b604005a80fe763bb8f8f
Size

106KB
MD5

4d0a05763f2b604005a80fe763bb8f8f
SHA1

5012859fe48e76b7f7e660c67319ecbc5a792ada
SHA256

9659c5d722bad679b3d7f147eb1de0bd45d59296e02c746d98e1abd01ce1b16b
SHA512

61eb43e8af6e5ea2fe9c16f055bd1ddfe1926dd44d31a2cb90bd4b5dcfabc78006cff2e32e1b14eef058a40184ad97ef914cf87238a8ee78c4fe42a7ae8d07e6
SSDEEP

3072:t79NU5exkn8z+Ecdq06flQ5jwaaHw7Koj4ri:x9WUxK8+EcdLSlQR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4d0a05763f2b604005a80fe763bb8f8f

Files

JaffaCakes118_4d0a05763f2b604005a80fe763bb8f8f
.exe windows:65535 windows x86 arch:x86

f1db2a3d0edd21b7a5fadc581b3b8a6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA

msvcrt

__setusermatherr
_initterm
__set_app_type
__p__commode
_except_handler3
__p__fmode
_adjust_fdiv

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsr1
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE