15cc5050557c55456e8b24e9b09214d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15cc5050557c55456e8b24e9b09214d8_JaffaCakes118
Size

526KB
MD5

15cc5050557c55456e8b24e9b09214d8
SHA1

a47c87024f1dd976fdc70fece0c7cdf13a5a8a4e
SHA256

687ae360a0b2d689229ee5296e92a33d8e1cbceb58018985449648a34a4b31d3
SHA512

4eb7711afc1a1799ae3f29f82390c9585f1adb3676414ff51a73a5011114ef86754f6fab29c88499830e56fbd2c410cbf97d9510eda21d70c8c73a7e40135e1e
SSDEEP

12288:h4MNbndmgsUuZW/IC1hoHXkX/M7KZstLuLJa0znC4:/lndlCZ6IC1yXkdZKLuYL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15cc5050557c55456e8b24e9b09214d8_JaffaCakes118

Files

15cc5050557c55456e8b24e9b09214d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a933d61c66b3545b0f482f6d4b78bcda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_beginthreadex
strstr
_beginthread
ftell
srand
_wtoi
__mb_cur_max
strtoul
_strlwr

kernel32

LoadLibraryA
GetLastError
GetTickCount
GetModuleHandleA
GetVersion
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
ExitProcess
GetModuleFileNameA
OpenProfileUserMapping
GetSystemDirectoryW
SizeofResource

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ