92647a484b382c4e91e9cbb3b418eb56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92647a484b382c4e91e9cbb3b418eb56_JaffaCakes118
Size

796KB
MD5

92647a484b382c4e91e9cbb3b418eb56
SHA1

98a4a3f1a2fc51d8a007e3d4edf04305409c77e2
SHA256

5fc83b80cb9df8ed5aa2d967fdb378cdf3e96a35eb778fd7e3e8c5307e31ce1d
SHA512

4503d47a456a1cdeeb53664b65499f1b321a984c6d749b6c4d2055f3843f4369ccfc510872eba47118b081e19d783c8e3d8488bad40f30e018cd561ee0906646
SSDEEP

24576:rZAdS0Er5NxvClPSToBOH1A7SthGxpOjT4:trXEPqCShWkT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92647a484b382c4e91e9cbb3b418eb56_JaffaCakes118

Files

92647a484b382c4e91e9cbb3b418eb56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cad328ef99399a408511b06975adfb67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIpow
fopen
longjmp
_setjmp3
fclose
fseek
ftell
fread
__p__iob
floor
pow
strlen
gmtime
fprintf
frexp
modf
fwrite
fflush
malloc
free
calloc
vsprintf
realloc
strncpy
ceil
printf
_errno
_msize

kernel32

GetModuleHandleA
HeapCreate
VirtualAllocEx
HeapDestroy
ExitProcess
HeapAlloc
DeleteFileA
HeapFree
GetCurrentDirectoryA
HeapReAlloc
lstrlenA
QueryPerformanceFrequency
QueryPerformanceCounter

Sections

.code
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE