f12a0e28a338512a01b6a0cea517f8f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f12a0e28a338512a01b6a0cea517f8f9_JaffaCakes118
Size

72KB
MD5

f12a0e28a338512a01b6a0cea517f8f9
SHA1

f806e89b221f3d56565e0e048fc366c183ff184b
SHA256

f2bb63373553f09ab300a757c97c865d3cb48297e99c210565b61a5fabe59e3e
SHA512

021b0f78e860a1e014ccb25d3e2a190728b85638800688496f4d1106a47db828ae5816427ee58b9a50ffadab3923d3abcacd70d9d751673199bd2b1252e40c48
SSDEEP

1536:QUEPVMy+gySBzjkw6+93gw0iaiFqm1Je8hmOUxBFLTPd0J:QUypjkw6C06Fqm1JjYOUj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f12a0e28a338512a01b6a0cea517f8f9_JaffaCakes118

Files

f12a0e28a338512a01b6a0cea517f8f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4aa213b46efb4bd17fa5b2eb8ca60f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_errno
asin
_unlock
__dllonexit
_lock
_onexit

kernel32

GetThreadPriorityBoost
SetCurrentDirectoryW
SetEnvironmentVariableW
GetAtomNameW
GetShortPathNameW
SetErrorMode
CompareStringA

gdiplus

GdipGetImageThumbnail

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ