62062c23394287f17056a1908b2a7f5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62062c23394287f17056a1908b2a7f5f_JaffaCakes118
Size

240KB
MD5

62062c23394287f17056a1908b2a7f5f
SHA1

6c7e8ce8f45acdee04eb7063eece2bbfcc7049b5
SHA256

a3c51216b87e064ceaee3a3d25d94a020517e370362e62a613330a2dd62e222d
SHA512

c9d8a2f7846f55b6adb85b7a8bd91fdca8f6e445597c020c3db3c3eb5f8390c3670f7f8a81f1ffff68e10990809eabc20027629c09368d435880a24a196b15be
SSDEEP

3072:WvoJRKCV5OifPzZB/QG/+eD+wMHzHI3AElGHlCYLAH2YZbOzs+TyZPO3O5xcwars:WvofDf3IGAwUEkl9LAHDKg9GSxcwow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62062c23394287f17056a1908b2a7f5f_JaffaCakes118

Files

62062c23394287f17056a1908b2a7f5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b681afd9a0b3b010b9cf3564a69a612

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetModuleHandleW
LoadLibraryA
TlsAlloc
TlsGetValue
UnhandledExceptionFilter
InterlockedExchange
FindNextFileW
GetModuleHandleA
GetSystemInfo
GetLocaleInfoA
EnterCriticalSection
RaiseException
GetCurrentProcess
SetEvent
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ