457943b2b727de5a72c050ba47e49335_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

457943b2b727de5a72c050ba47e49335_JaffaCakes118
Size

47KB
MD5

457943b2b727de5a72c050ba47e49335
SHA1

58d73823484a4034f38a62e0dc6d5f1efb3cc693
SHA256

1878b1d2b1062b3f1b7911cad62e6df46a0c6829002838183027bd0e726ec912
SHA512

93b7aa490c4ccd1abd39f1c28eb8d42702fae29813f9f5c25184dc1d5e6daa2fe13b555dc17aff4a7055765f8e7ba6b9ddfb77a72673868bfb819b3890ded423
SSDEEP

768:mRs4CPk+qpcYOb5Tq31+ZINJpeHXXKiHg9IOSTDfIem5GH8yTRImGr:mRvcYu5xZINOHnKiKSTDfQGH8yTRIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
457943b2b727de5a72c050ba47e49335_JaffaCakes118

Files

457943b2b727de5a72c050ba47e49335_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c01b0c9ae3a7d37b678b183990c7adc9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetEnvironmentVariableA
GetStartupInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ