67346f3450e917b350be206bd57fdf1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67346f3450e917b350be206bd57fdf1a_JaffaCakes118
Size

9.4MB
MD5

67346f3450e917b350be206bd57fdf1a
SHA1

5bacf093d16a7d958c1c9b67821c9c491fe4a05e
SHA256

4d6545a1eaf567b77258c912df8b076f4dbf2c7c0aba563b5675015d99077f0e
SHA512

fc387f2d33452d044c7ad943c0627cde50468f51f13a743dc5002bbd56bfe9abe4a119c61e8ad3cef1dbcc3a4188c3612ae9231ced6806408336537c49f555fd
SSDEEP

192:AmVBFmPHPuOFPNW0N8vkoMXywd0nP1oynb60sv/Hu5pAW7lom6:1iHjW0z9iwdU1d6R/H2pAWRv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67346f3450e917b350be206bd57fdf1a_JaffaCakes118

Files

67346f3450e917b350be206bd57fdf1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4cda664a84998c80333a01e3e5dcbb5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
ReadFile
SetFilePointer
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA

msvcrt

_acmdln
exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
realloc
__getmainargs

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ