23e8d3044ad6698e572599c4938b072a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23e8d3044ad6698e572599c4938b072a_JaffaCakes118
Size

155KB
MD5

23e8d3044ad6698e572599c4938b072a
SHA1

e0db00d0e6277b608c48f0927f553483a69fb8d2
SHA256

05bd182048dcc2fa83657555055a1240a52683f740e515b0d839a594ee50dd65
SHA512

cd654cd8cdc768523ff85e036bf15bb068db43604738a19d47674981223d578ca3732ffabbe9e9f53d9d22973d3d7df11c8e7c84c3a84468e3859f432f2b450d
SSDEEP

3072:6lCK955lOZQBORovsqz1nwaeu48IeVA2t41:c955lbORgsqZwo48IeVA91

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23e8d3044ad6698e572599c4938b072a_JaffaCakes118

Files

23e8d3044ad6698e572599c4938b072a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

f8af2dc5bc3962c7feca46a4aafb0ee1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
_except_handler3
__setusermatherr
_lsearch
_adjust_fdiv
_wctime64
__p__commode
_onexit
__set_app_type
_getmaxstdio
__p__fmode
memcpy
_XcptFilter
_controlfp
_acmdln
setlocale
_initterm
isalnum
malloc
_mbstok
_exit
__getmainargs
_ismbbkprint

kernel32

GlobalAddAtomA
CreateProcessA
GetThreadContext
GetModuleHandleA
CreateFileA
GlobalLock
GetModuleHandleW
FreeLibrary
HeapCreate
GetStartupInfoA
PulseEvent
GetSystemInfo
ResetEvent
GetConsoleMode
GetCurrentProcess
SetErrorMode
GetNumberFormatA
InterlockedDecrement
lstrcatA
HeapAlloc
LockResource
Sleep

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ