14c281d1980cdfe9ac120762ddbc4712_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14c281d1980cdfe9ac120762ddbc4712_JaffaCakes118
Size

425KB
MD5

14c281d1980cdfe9ac120762ddbc4712
SHA1

685efe55db286de6b5c9773f8ad4d1f85419e59e
SHA256

56b0562f0ecf78f7d25a0dcf3ddd7671fda3ca31626c7052348f0e7d81cc3064
SHA512

41effe02a9af76242550522a422cbe37f25687e9b213d8d58e7e9ee146ae0d8c27a51156fa40205797fbf64f8b1485a07602e741959269083f94b3ba93b5fc1f
SSDEEP

12288:y8OuoZPJ16qE2dgb2/v8Tp1y5C06vO7Kf/73:y8JoZbPE2Nv865bzuf/73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c281d1980cdfe9ac120762ddbc4712_JaffaCakes118

Files

14c281d1980cdfe9ac120762ddbc4712_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3ab72fd0254c25388bfa2736a2de04c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_controlfp
memset

kernel32

GetLastError
GetModuleHandleA
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetTickCount
GetSystemTimeAsFileTime
GetVersion
GetModuleFileNameA
LoadLibraryA
GetCommProperties
GetEnvironmentStringsA

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ