4c179097997c46fe7de5a1084adb3ec0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c179097997c46fe7de5a1084adb3ec0_JaffaCakes118
Size

281KB
MD5

4c179097997c46fe7de5a1084adb3ec0
SHA1

61c22d7fb2a37bb673fb118be5f22bdc906b4540
SHA256

52a95752f5302c56e465cbfabea88590c0e299cbf74d3dabdad21cda9f40eb2e
SHA512

b8765cabd9c8779a772512a347a606cf962a5c383f307524c88293314aa3e6b569562324f0f5af52eea77e4483a3f94104e9b13a615203fb28e7431f458573b4
SSDEEP

6144:iQNbHKXEOLMexqHfIqUqcN5fnDL5r0O9sy8Ji:iQUXIehdPN1nR9gM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c179097997c46fe7de5a1084adb3ec0_JaffaCakes118

Files

4c179097997c46fe7de5a1084adb3ec0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1d4841e40c5f92d1917d6ec9b95c66ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
calloc

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
OpenProcess
GetProcAddress
lstrcpyA
GetModuleHandleA
IsDebuggerPresent

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CixAm
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ