439d2138038ac1823c767fd2d1591023_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

439d2138038ac1823c767fd2d1591023_JaffaCakes118
Size

46KB
MD5

439d2138038ac1823c767fd2d1591023
SHA1

1c338fe98a04d71eeefeb989119d1825abef1ed2
SHA256

f8dc329d081b1fd1f25179ad84c1d6ebd5ba155af2e0bcc4a066525bb4dfd44c
SHA512

c555059ea70238b8701cb5bbd7fa85a59f211655c194691f99259351cd3119ce454ef8c61c59f2b05164fd1148099de518b65d81092c0a8d87e3327c51885857
SSDEEP

768:fJJxObvyJFuffYmtwFT39MB+bbBhbc5VjngLPw4LJIpJKZa:TufwmtkNMmNh6+PwLpkZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439d2138038ac1823c767fd2d1591023_JaffaCakes118

Files

439d2138038ac1823c767fd2d1591023_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cc99e05b7190a016eb4e7dbb3f398a80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
EnterCriticalSection
ExitProcess
FindResourceA
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
HeapAlloc
InitializeCriticalSection
MapViewOfFile
MultiByteToWideChar
OpenFile
SetEndOfFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

__getmainargs
__p__commode
__set_app_type
_cexit
exit
rand
setlocale
sscanf
vswprintf

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ