64369f7b57d208afb6461f153653169c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64369f7b57d208afb6461f153653169c_JaffaCakes118
Size

238KB
MD5

64369f7b57d208afb6461f153653169c
SHA1

5047e102cc03cb239a9b4eeacfe7379b157b0a47
SHA256

2e2a335d12ae3f944fcd524cc02fd0fe2c5a5ca3549fe4ce704d0e65e81e4e87
SHA512

2d1628b827a352cd2e660fb983cde21d2ab0e4b1d1d36f7de0ce9232fe25ba83549c4bca70abedec3b91141439be33b03868e6e72a0e565230e35680abb61857
SSDEEP

6144:uSQ+HBd8CFyUivetyV9C3jB7nAHRyEvHjqm+gMwOcK:FB+1U6etyVCns5v4gMw6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64369f7b57d208afb6461f153653169c_JaffaCakes118

Files

64369f7b57d208afb6461f153653169c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03f1dd65201f0c19f18067dd140b7645

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
GetStartupInfoA
RtlUnwind
GetModuleFileNameA
LCMapStringA
FoldStringW
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

msimg32

TransparentBlt

Sections

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ