19e51c1af1036bf92755da5d18afdbbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19e51c1af1036bf92755da5d18afdbbf_JaffaCakes118
Size

114KB
MD5

19e51c1af1036bf92755da5d18afdbbf
SHA1

d3ecf64038a8ef582fa095ce9f9d68b4840b7d17
SHA256

343d4854ba5ab9204253a8a8e78dbbcf52f821c4bb8cdf09e49d4b20daa2abdd
SHA512

4f815223ea82f03697bdfade2331db6bb72149f1106f81d444accebb710c2e39e61e51f65d9a05884ea8aef8355858409ab65b6435300d177f31c7f0075460d3
SSDEEP

1536:z8AClvN47S82E5wW/lPPf+EvxPG8c8AucMMwKszxzEZIMwS:QASvN47vP5wIxRNGBucMaq2ITS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19e51c1af1036bf92755da5d18afdbbf_JaffaCakes118

Files

19e51c1af1036bf92755da5d18afdbbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d24d95fdf1f31e890b91893c3c347242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
HeapAlloc
InterlockedIncrement
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQueryEx

msvcrt

swprintf
wcscpy
atol
fopen
fseek
strstr
strncat
strlen
strcat
atoi

user32

DrawEdge
LoadCursorA

comctl32

MenuHelp
InitCommonControls
GetEffectiveClientRect
DrawStatusTextA
CreateToolbarEx
CreateStatusWindowA
CreatePropertySheetPageA

Sections

.text
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ