25d224f5c82b5be93bebb9fa63931973_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25d224f5c82b5be93bebb9fa63931973_JaffaCakes118
Size

31KB
MD5

25d224f5c82b5be93bebb9fa63931973
SHA1

c122094a800872203e7439394779cf913d93f881
SHA256

ad3b067e2618921a28081bce3f7a96437d937593bf9ad2db128c1d82833020e8
SHA512

e4725bf5a639a5a3234650e5bd4cc9c651c248abcf8b7c5b6edc6918fd73cd8940c808c039622604e97e51bb0d3964fabc61213796e84690e5bdc076af2d3786
SSDEEP

768:KKvFJp1moaAcsJPVSoYkDG2mS3d8rwBJ5jC38:d1soBcaNDz8cB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25d224f5c82b5be93bebb9fa63931973_JaffaCakes118

Files

25d224f5c82b5be93bebb9fa63931973_JaffaCakes118
.exe windows:4 windows x86 arch:x86

131ff9ff587f2de6d28d4eea5a09def6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
WaitForSingleObject
RtlZeroMemory
CreateDirectoryExA
GetThreadContext
GetPrivateProfileIntA
FindNextFileW
EnumSystemLocalesW
GetVersionExA
GetSystemWindowsDirectoryW
GetPriorityClass
ConvertThreadToFiber
SetConsoleMaximumWindowSize
FatalExit
GlobalGetAtomNameA
BindIoCompletionCallback
IsBadStringPtrW
GetLocalTime
HeapUnlock
GlobalCompact
GetProfileIntA
SetCalendarInfoW
MapUserPhysicalPages
GetFileAttributesExW
SetVolumeMountPointW
SetStdHandle
GetTapeParameters
EnumResourceLanguagesA
InterlockedIncrement
ExpungeConsoleCommandHistoryA
GetModuleFileNameA
CreateDirectoryExW

Sections

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ