63981be42cfb16042a590c64efd0d039_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63981be42cfb16042a590c64efd0d039_JaffaCakes118
Size

27KB
MD5

63981be42cfb16042a590c64efd0d039
SHA1

eec85d820b755f0faf49d90c4649a74020ea2064
SHA256

e8b56f3d5be1094ec562bd92b42d1a2f813ed7463b5054647333c599468bedcc
SHA512

0f46ff51a1c5c5429336b566d62d090449491b3319b65329f400854f64b71b2a26c686dd726fff6af34235db40bd1df5659e54edec7fe26564fc053cecc22b2a
SSDEEP

384:IwknmC21i45H1MLUU496jqDseOeNO7/TNl/4oLIGf:wnx215F1MLUU6Z7OeNOf4oLI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63981be42cfb16042a590c64efd0d039_JaffaCakes118

Files

63981be42cfb16042a590c64efd0d039_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2a300e57823907a45b26a472b43a19e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
_setsystime
feof
_exit
exit
_controlfp
_mbslwr
__p__fmode
_except_handler3
_XcptFilter
_ismbbkpunct
_initterm
memcpy
__setusermatherr
__p__commode
_control87
_adjust_fdiv
_mbschr
__set_app_type
_set_error_mode
_wstrtime
_wexecvp
free
_fileinfo
__getmainargs

kernel32

MapViewOfFile
GetStartupInfoA
SetLastError
GetProcAddress
DuplicateHandle
TlsAlloc
GetLastError
GetModuleHandleA
WriteConsoleA
LCMapStringW
GetTimeFormatA
GetFileAttributesA
FreeLibrary

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ