32583ee5ab3337dbf81c3370bb29e0ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32583ee5ab3337dbf81c3370bb29e0ed_JaffaCakes118
Size

112KB
MD5

32583ee5ab3337dbf81c3370bb29e0ed
SHA1

3630b4272a806aedada6df4247c217be6415c9b9
SHA256

71a48fc6dad85b62a1456aee599d1f34fca8510027939f59ee89639e91237737
SHA512

3956c5514e66b1600c7197c907941e36e23d01afa324d14bd5ebadc9f6496d7313cf63411d164fe76e260f561474421493a942d78983fdcea085c89137d75ee9
SSDEEP

1536:SYemibu2YnlBZsjKdq4X6Xp/Lp0kkXVySyJk7Ge0Q9IhFO8GqR1bf5w1Pyf:dIy2YnzZsjDKWp/FqXV8bwg6AGyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32583ee5ab3337dbf81c3370bb29e0ed_JaffaCakes118

Files

32583ee5ab3337dbf81c3370bb29e0ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e765b7e284cfe8dadaf47ab2cb3ba10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStructA
InitializeCriticalSectionAndSpinCount
SetLocaleInfoA
GetPriorityClass
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE