0df27ea24ee600af75fc0445423cfc99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0df27ea24ee600af75fc0445423cfc99_JaffaCakes118
Size

65KB
MD5

0df27ea24ee600af75fc0445423cfc99
SHA1

94737b8eea7c0457c7dee4eb702874b7a4a36ec3
SHA256

1ab34c2660672850a391f156dd52bc2e39897d21f6ebd916b49082a6500d46bf
SHA512

ae4da21b9cedf8d31a92d1abb0cc1dfd0a71a168a733b0cdabefbb540dbe916c774507bc6497dbca6f8fd0669c4e13b885da72709d8825d9dba347b5c84a9b64
SSDEEP

768:Rl66qmW97rX86rPnYapOEBwMXmRTAAf1OfRTA5AVE3EOduqO9srxad:Rl6hmsv/YafwMWJAoOfNSiOduNsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df27ea24ee600af75fc0445423cfc99_JaffaCakes118

Files

0df27ea24ee600af75fc0445423cfc99_JaffaCakes118
.exe windows:1 windows x86 arch:x86

15e658930db59549938b8e95de107cca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
RtlUnwind
PulseEvent
Module32First
GetConsoleOutputCP
WaitForMultipleObjects
GetStartupInfoA
EnterCriticalSection
DeviceIoControl
GetEnvironmentVariableA
HeapCreate
GetCommandLineA
InitializeCriticalSection
GetEnvironmentStringsW
HeapAlloc
LockResource
GetModuleHandleA

msvcrt

wcschr
_wcmdln
_control87
_get_sbh_threshold
_controlfp
__getmainargs
_exit
_heapadd
__setusermatherr
_adj_fdiv_m16i
_itow
_adjust_fdiv
_except_handler3
_tzname
clearerr
_wctime64
_acmdln
_clearfp
__p__commode
exit
__set_app_type
_mbsnbcnt
log
_cwprintf
_XcptFilter
_adj_fdiv_m32
memcpy
__p__fmode
strncat
_initterm

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ