21929d204d69591c74e6fd2706879ec3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21929d204d69591c74e6fd2706879ec3_JaffaCakes118
Size

149KB
MD5

21929d204d69591c74e6fd2706879ec3
SHA1

2c21cf4785982ffdec25f421d078477117c3e583
SHA256

fc9b4816cc461a7902002d768f52a1700a83e5180c3a396472c9d94a4755dcc5
SHA512

12ba583e4dff18253ae363c7593022c1cdc2cff3546b98ce701bdaf405f0ffa7dbc8185d9f367491dc1061d57bec0239753cafe080c352b2847a3198b79c4081
SSDEEP

3072:Ika4BT0F9tnBsTlKse66dOV3RXL2/ODS/LFkJuenfAiUzLkv:IBGqNBsBK8ZtOFenfAZHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21929d204d69591c74e6fd2706879ec3_JaffaCakes118

Files

21929d204d69591c74e6fd2706879ec3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bcf61c4f462ee69e1ecfe2fd4961b0f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

lstrcmpiA
lstrcpynA
SetEnvironmentVariableA
SetConsoleCursorInfo
OpenEventA
HeapCreate
LocalUnlock
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ