19d7f1a2044c595f1987b04edd597ee3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19d7f1a2044c595f1987b04edd597ee3_JaffaCakes118
Size

43KB
MD5

19d7f1a2044c595f1987b04edd597ee3
SHA1

e7642520a21e926c558f4ca7716a4c76101a8c52
SHA256

1afec538d6e6f55698ef34c55a5ee260855effea8fc0198d484cd3e65465ea4c
SHA512

ddbd119e4004cc0f298161d9bd3c895979dae222d93ffe1a2505be54fcdfa2b9e65ef98a604730fa6e167c16ade09e43f5ae0c65ae163b22d4bc6833bec54c90
SSDEEP

768:bg3frpTHbh79rDJNSs5xkf9ZW2MZFphImEKFDx+lyKJYq3ih:4fBbHrDH8fWtFpOWFDx+lyKajh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d7f1a2044c595f1987b04edd597ee3_JaffaCakes118

Files

19d7f1a2044c595f1987b04edd597ee3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d6f20f81a223cc90bece848290f3e35c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
HeapAlloc
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpiA
lstrlenA

msvcrt

_XcptFilter
__getmainargs
__p__commode
__set_app_type
_exit
exit
rand

ole32

CoInitialize
CoTaskMemFree
StringFromGUID2
CoCreateInstance

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ