4d268df3656548887bf3164789d2315e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d268df3656548887bf3164789d2315e_JaffaCakes118
Size

177KB
MD5

4d268df3656548887bf3164789d2315e
SHA1

625e2a19e1970543aff5a8703861d20712934241
SHA256

1eeef3e0e8ffb09e882fa9a9751125c19b32db36586802b582a8fd72bf62b2d8
SHA512

c09cae222ec7943c702f3bcf78b7ba4fd89b00e776cd56b4d09b52d883545e5b15804ea5d3476038aa97d68279bca083e2989587cdd4f1d571add40fd69553de
SSDEEP

3072:tL26t8aA+wXFIUAxaAIqS1JWw+isGlD7Blmil9VHwLh5QclPw6y7DsfAE9mWldxz:HtQdXFhoaAdS1coD7mil9VHwgcJwZsC+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d268df3656548887bf3164789d2315e_JaffaCakes118

Files

4d268df3656548887bf3164789d2315e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b333af6b710a887a8604b5a8cf237aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetModuleFileNameA
LeaveCriticalSection
RtlUnwind
HeapSize
IsDebuggerPresent
CreateEventA
TlsSetValue

msvcrt

_wctime
strncmp
_waccess
__mb_cur_max
_beginthreadex
_fullpath
__dllonexit
strncpy
_strtime
_except_handler3

Sections

.text
Size: 170KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ