3a91616d03e7f3ca97a3af2a14587637_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a91616d03e7f3ca97a3af2a14587637_JaffaCakes118
Size

24KB
MD5

3a91616d03e7f3ca97a3af2a14587637
SHA1

be39b63ca5b2bb80d564796206eb9258832a9505
SHA256

50ee308c616722061a1e5f800b69c2fae39806b81fff3022940a4efd744f050d
SHA512

a93ea12bf3b2316c01bb54327af612f1fb7596f35ff910f14e3a141a994bca93ec5499970ee22d9031fd3648ab3e16ca53d145779bf65d94e5da8b6b6659024a
SSDEEP

384:MtZA9hzNw4lera93kNSkvS/z/JHEohMeS/qTqH3cmY7SsdiV4Gx8CHA:MIvRw4l+QYiDJHEo+e+q+H3cmsSB2GW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a91616d03e7f3ca97a3af2a14587637_JaffaCakes118

Files

3a91616d03e7f3ca97a3af2a14587637_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eaab965360f49a3746b24f264ec1fb9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ulib

?Strspn@WSTRING@@QBEKPBV1@K@Z
??4WSTRING@@QAEAAV0@ABV0@@Z
?Strcmps@MBSTR@@SGHPAD0@Z
??1WSTRING@@UAE@XZ
?Resize@BDSTRING@@UAEEK@Z
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
??1MEM_BLOCK_MGR@@UAE@XZ
??_7DSTRING@@6B@

kernel32

GetCommandLineA
GetModuleHandleA
GetSystemTimeAsFileTime
lstrcpynA
GetTickCount
FormatMessageA
GetCurrentThreadId
GetLastError
Sleep
ExitProcess
SetProcessPriorityBoost
FreeEnvironmentStringsW

msvcrt

memset
_wcsicmp
_splitpath
free
_vsnwprintf

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE