0319379f32030505f14fc256b0303ba0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0319379f32030505f14fc256b0303ba0_JaffaCakes118
Size

187KB
MD5

0319379f32030505f14fc256b0303ba0
SHA1

20951c8ed7ff4dd15bf365fd1700fc8035091fe6
SHA256

21fc9eb4f5d6074598f0f3db77e0e3f08b7be97c14595e8cd9145794ce771dd4
SHA512

941d75dad4dbb9c112b2db990e04488b3a10bc0330fb07d7147fbf5cdefa539b2de2d806c46c1a36c4a090a337cc695768703dfca352be5b2bb29ae9d23eee30
SSDEEP

3072:OVFmKxROY8oJVOgpHpeo3/KkuUsEUFs97BS5+zEwr/+UKT7QzvJ:wmEROY8YHpVKmsEUzAN/+U8ER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0319379f32030505f14fc256b0303ba0_JaffaCakes118

Files

0319379f32030505f14fc256b0303ba0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8f17ce56654bbafb31dbd846677c3e76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenEventA
TlsSetValue
lstrcmpA
GetEnvironmentStringsW
DuplicateHandle
LocalFree
GetACP
DeleteFileA
GlobalAddAtomA
GetModuleHandleA
SetErrorMode
GetStartupInfoA
GetCommandLineA

msvcrt

_XcptFilter
_get_osfhandle
exit
_utime
_beep
_mbscpy
_initterm
fscanf
_except_handler3
_exit
__setusermatherr
_pipe
__set_app_type
_acmdln
memcpy
atol
__p__commode
_adj_fdiv_m64
__getmainargs
_controlfp
_adjust_fdiv
__p__fmode
freopen

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ