24685a8081c7e8da5226018759cc298c_JaffaCakes118 | Triage

Sharing

General

Target

24685a8081c7e8da5226018759cc298c_JaffaCakes118
Size

22KB
MD5

24685a8081c7e8da5226018759cc298c
SHA1

523d579d465484d952d6506cfd8e9e3ab69dc34f
SHA256

3c703b2c143a1a2a633bdb5e647f2679940347e82cac2906d985693009541d37
SHA512

15bd7e91418d0adceb42cbe5caa5a8b870a07c8c5fd1f30d1645af683685bea641ac330a32531134c2e87513beffedf7101a9ef82a7f5b0a060bb063167a9b9d
SSDEEP

384:XkcJgwe9pHhfu6MtOIS1ZvJb3mafjiXtOAb9ELZkjV0VYeG53kLtWnTvW:XkCr2HtTLb2afjiXkKiwatG19

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24685a8081c7e8da5226018759cc298c_JaffaCakes118

Files

24685a8081c7e8da5226018759cc298c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

106403845c992b56c2b2ce75b29a7ea4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEnvironmentVariableA
InterlockedDecrement
GlobalUnlock
HeapReAlloc
GetExitCodeThread
HeapDestroy
CompareStringA

msvcrt

realloc
wcscmp
exit
_strlwr
wcslen
strcspn
_isctype
_itow
_waccess
wcschr
_pctype
wcsncmp
_itoa
_wtoi

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ