46ec3c2daf423f9905b39e37e91b68a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46ec3c2daf423f9905b39e37e91b68a4_JaffaCakes118
Size

194KB
MD5

46ec3c2daf423f9905b39e37e91b68a4
SHA1

b3886368ed00cc58092c763254e45cc69f4991ea
SHA256

657eb22cf7efbbdde88720a62fa366943a5e89d1605ef4cfca87cf636883fca7
SHA512

1bf68986c8cb4ea2f38e45c6f0951dcf3ed2ca69b4ab60a28f70ea39536947d91d0c39b68c1094f006acfe631ebee4f1c8d904e4b9a335ae27b20b44d8798097
SSDEEP

3072:Ibo6b6s5VP9GmNkhh8IhPycHqtsShByLjDXJlg+3pW5PZkH:bc6IV1Sh/rXJljeZkH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ec3c2daf423f9905b39e37e91b68a4_JaffaCakes118

Files

46ec3c2daf423f9905b39e37e91b68a4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

53eb11a7ce410af50d7fc2fd92b09007

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_lsearch
_adjust_fdiv
__p__fmode
_initterm
_winminor
__setusermatherr
_wcsupr
_acmdln
__getmainargs
exit
_adj_fptan
is_wctype
memcpy
_XcptFilter
_mktime64
strtoul
wcsstr
_finite
_exit
_except_handler3
_controlfp
__p__commode
__set_app_type

kernel32

GetSystemInfo
InterlockedIncrement
LoadResource
GetStartupInfoA
GetFileAttributesA
IsBadReadPtr
lstrcmpA
GetModuleHandleA
HeapCreate
HeapReAlloc
FlushFileBuffers
HeapSize
SetHandleCount
Sleep

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ