197cd90d1a76d398caf01b79fd347489_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

197cd90d1a76d398caf01b79fd347489_JaffaCakes118
Size

96KB
MD5

197cd90d1a76d398caf01b79fd347489
SHA1

8e71ca0795357f6f78ad82eba949015e48e602c3
SHA256

af1d3daae8f142bb7a8455c59a5cf160250c8b319de8ef8afb6c2459794ab9f1
SHA512

74f400e94ed1fce73a7fc2d6aa2df08880e256b6a42d04a5f88fd309de6c6e16f4763541ab1058e4fb620b82f4e200f720f5dff1df4a192bfb1771332b768a2a
SSDEEP

1536:LoMlPuFmkfEWhTYKEPX9Nk2fKhXhVmZmvycOBGC37VyNYk1YEBF/IMB:r+6WhTYKEPX9+2ixEkOBF7INd7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
197cd90d1a76d398caf01b79fd347489_JaffaCakes118

Files

197cd90d1a76d398caf01b79fd347489_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17657525faad0c71c8da7347f66c2e94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetThreadTimes
AddAtomA
FindVolumeMountPointClose
GetTimeFormatA
CompareStringA
OpenConsoleW
GetSystemPowerStatus
GetEnvironmentVariableA
FlushConsoleInputBuffer
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE