f1f686c520fe7bb8af787ccaa053bc7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1f686c520fe7bb8af787ccaa053bc7c_JaffaCakes118
Size

29KB
MD5

f1f686c520fe7bb8af787ccaa053bc7c
SHA1

81966d1dd47a6d9e8ae4bd09c107f69b4f37b98c
SHA256

2b2c4f5f0d9819b0b3b9a78ddea8995534e968b34f3519abae30b71b334fca5e
SHA512

596ec0c43093b91ae7021b537277babc8b7caf199019992a1f1ddf2a813e3bd68ab20238f1b23bb79f2f7c8941a37f43bbef4dea0c08a04b0037f75055f3f4bc
SSDEEP

384:W9fJp7dZ7l9Q5xMmFDCyZq58q/VTfOYufKXnoBH2JOEA/2:AxR7l9CxMmFDCyZq5f/VT2Yu2nosJ7k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1f686c520fe7bb8af787ccaa053bc7c_JaffaCakes118

Files

f1f686c520fe7bb8af787ccaa053bc7c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

99f22be5e374d53a429beb60ed9ec07d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
ReadProcessMemory
FreeLibrary
DuplicateHandle
GetFileType
GetModuleHandleA
lstrcpyA
GetSystemInfo
GetConsoleCP
CreateProcessA
IsDebuggerPresent
SetPriorityClass
SearchPathA

msvcrt

__p__commode
_adj_fdivr_m32i
atan
_initterm
_adjust_fdiv
__setusermatherr
toupper
_wcsnset
_controlfp
memcpy
__p__fmode
exit
_except_handler3
wcscspn
_wfopen
_spawnve
_XcptFilter
_mbsnccnt
_mbsstr
_acmdln
__set_app_type
__getmainargs
_exit
wcscpy

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ