47f0f840fc693aaffaf9f7e683990f65_JaffaCakes118 | Triage

Sharing

General

Target

47f0f840fc693aaffaf9f7e683990f65_JaffaCakes118
Size

48KB
MD5

47f0f840fc693aaffaf9f7e683990f65
SHA1

d4e3d61709739e07653be4cf3b67ebc1fc7dc52d
SHA256

b1081c66b230ec4dd739005021dfb2d0a1dda1acdc6692453ab0e98342657029
SHA512

36c032722a12ca8199f32cd618cecbe5b258cc9810ea702bf4b103b710b64ce82844d1a972e39225a6d90bbe05e60eb7033f5fd7750750d937799b64b2667843
SSDEEP

768:E0699fnwTA0EAcJxnlYEgFegP4JtGfihzziiKcnw9shSLrIpJKZa:MGWJxnKXFrgJtGa1eiLw9j8pkZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47f0f840fc693aaffaf9f7e683990f65_JaffaCakes118

Files

47f0f840fc693aaffaf9f7e683990f65_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cc99e05b7190a016eb4e7dbb3f398a80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringA
EnterCriticalSection
ExitProcess
FindResourceA
FreeResource
GetACP
GetCommandLineA
GetDateFormatA
GetLastError
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemTime
HeapAlloc
InitializeCriticalSection
MapViewOfFile
MultiByteToWideChar
OpenFile
SetEndOfFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree

msvcrt

__getmainargs
__p__commode
__set_app_type
_cexit
exit
rand
setlocale
sscanf
vswprintf

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromGUID2

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ