15c3dcb26f0483fd7ae5bf07a70e1caf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15c3dcb26f0483fd7ae5bf07a70e1caf_JaffaCakes118
Size

25KB
MD5

15c3dcb26f0483fd7ae5bf07a70e1caf
SHA1

4a00ba98369e149a876d8dbeb343745d7e1fe178
SHA256

9e2b26b0414e773d58769ef43bab15cce8d518e2f2d00e9e48b9d8a8212dc793
SHA512

257e42a4cf743b622a5a0b1b0c3092dd981f9892fa5da7c789989ef8ddea53d24793b6859eb2397a1f6697e9f044fa5c9a6083cdede047dc628ef6a7ec9463db
SSDEEP

768:5pAeTUX9VPpVlc5Rcb6tCceooooooooorIo:uXFID1CcYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c3dcb26f0483fd7ae5bf07a70e1caf_JaffaCakes118

Files

15c3dcb26f0483fd7ae5bf07a70e1caf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10f3cf1eaac440af5eb4d63873cca8cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
HeapUnlock
WaitForSingleObjectEx
lstrcpynA
SetSystemTimeAdjustment
lstrlen
HeapAlloc
HeapDestroy
SetLastError
HeapFree
lstrcmpA
VirtualProtect
lstrcmpiA
IsValidCodePage
lstrcpyA
HeapCreate
GetLocaleInfoW
SetUnhandledExceptionFilter
GetMailslotInfo
GetLongPathNameA
IsBadHugeReadPtr
ExitProcess
MoveFileWithProgressW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ