1beb36b619e923eb255e9c31c79243f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1beb36b619e923eb255e9c31c79243f4_JaffaCakes118
Size

194KB
MD5

1beb36b619e923eb255e9c31c79243f4
SHA1

081ab4391ed0fa3dbac7bd6fc6a4c1d72ba5f5e3
SHA256

bb80bca5e007174ab335b279e2bb36aae748accfc65e025f9e3b90bd797b1a2c
SHA512

ad82636e67b2319e22fb38c2edb3616a328487ae6ac89eac7bbfd39df51085869e2907ea1868d6c3601e418f83c2df8d60dcf662bbfbfcdf28315f5c41d685b0
SSDEEP

3072:qxmvNlBYHB1+3bsYQ1VDvMRheY1cpuOmmIWf:6mMQYYeVAheYSpuOmp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1beb36b619e923eb255e9c31c79243f4_JaffaCakes118

Files

1beb36b619e923eb255e9c31c79243f4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

576d1daa56bb13341b85094cd3e20fa9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
MulDiv
TlsGetValue
GetStartupInfoA
GetStringTypeW
lstrcpynA
HeapCreate
GetModuleHandleA
GetCommandLineA
CreateThread
SetUnhandledExceptionFilter
TlsAlloc
HeapAlloc
GetSystemInfo
SetHandleCount
WideCharToMultiByte

msvcrt

_fcvt
_sys_errlist
_controlfp
atan2
_dup
_heapwalk
_except_handler3
frexp
_initterm
memcpy
_creat
_exit
atoi
_XcptFilter
_adjust_fdiv
__p__commode
__set_app_type
exit
_tzname
_acmdln
feof
__setusermatherr
__getmainargs
__p__fmode
_isatty
_ismbcl1

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ