730468b7206b2ea1c7d45e2cc332b264_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

730468b7206b2ea1c7d45e2cc332b264_JaffaCakes118
Size

814KB
MD5

730468b7206b2ea1c7d45e2cc332b264
SHA1

1e761eef146fc21428602dcad6aee5c8c1323ca0
SHA256

e70420771e06a2cb08938ea26f7a78e501a4b51de7ef3334daea655ba8fa68c9
SHA512

4e24bc49c7a02c160a14c2c9b6b1b2b32f0d89e19094b20c26e890238ffa80fdab16bf208f13615a4d6bb396dc86a427a1a5bea4826885b6e7707ff3a1d4a04c
SSDEEP

24576:YGuFy3DglRufFFFFXcu4dlrCWoXJNgyzx/wWH:Y2DglE3F4+WsDdxlH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
730468b7206b2ea1c7d45e2cc332b264_JaffaCakes118

Files

730468b7206b2ea1c7d45e2cc332b264_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f50ee1814ba7a037bb7f302467addaf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
FindResourceExW
FindResourceW
GetLocaleInfoW
LoadResource
LockResource
GetStartupInfoA
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

__wgetmainargs
_initterm
memset
acos
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
__dllonexit
_onexit
_wcmdln
memcpy

msimg32

TransparentBlt

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ