68de317076e03ef6187ca01c98e5b479_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68de317076e03ef6187ca01c98e5b479_JaffaCakes118
Size

28KB
MD5

68de317076e03ef6187ca01c98e5b479
SHA1

14383a3df4682790d5682792c7f5eee8bc60b4d3
SHA256

e472ea0f33f79863f76d5a9fb33671751fbe32d92d5a3ca411ca85fd97486fbc
SHA512

a3eb9a3f96c68a5abc68238708f7b95e4f8886dfad6b16a34fbc4eb501d0c12f7edcfacc8d39720495aeb9d826eb70ecd69b18a0bae6c6ce0a19067c1cfcc53d
SSDEEP

192:1aR4hTixNi6QW1Rks1oynPJ4SW7MXsnKSksLFvCPpYY7TcWO49ObS177T2cMqQd7:1aRDNxRV1V47M8KOo3p9ObgWcDAPvr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68de317076e03ef6187ca01c98e5b479_JaffaCakes118

Files

68de317076e03ef6187ca01c98e5b479_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eabb4280ac342645164868dcdab18c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeResource
SetEnvironmentVariableW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
QueryPerformanceCounter

user32

CreateAcceleratorTableA
GetQueueStatus

gdi32

DeleteObject

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

......
Size: 4KB - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.....
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE