2622ba10e357483332f3b3b2504e4629_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2622ba10e357483332f3b3b2504e4629_JaffaCakes118
Size

156KB
MD5

2622ba10e357483332f3b3b2504e4629
SHA1

ad69cad2b1147fc780d4a74c9133122567c5db04
SHA256

3ca928dd7d41771d0ce3c4bfbb1f259de095357a2629046b05ef62419b23c520
SHA512

bed0619a85621e71a978b052298d6e83d6315fb2b2c3937d70a770f896ce0c85de20315add3075c930fc27d2bac37ce9bd3be53485458821b0460326bf40c253
SSDEEP

3072:ano2O5xl+vVWNRIqyZbhWeU50bKgYF75dgcPTeIppy:anR7f/c0bsdgcPTe1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2622ba10e357483332f3b3b2504e4629_JaffaCakes118

Files

2622ba10e357483332f3b3b2504e4629_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1a2154d489ef4d063a4638b795c4e116

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
lstrlenA
GetModuleHandleA
GetStartupInfoA

msvcrt

wcscpy
calloc
strlen
malloc
_exit
_XcptFilter
exit
_acmdln
free
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__getmainargs

Sections

.rdata
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ