73da9c06b5f9257e6c293022569078f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73da9c06b5f9257e6c293022569078f4_JaffaCakes118
Size

5KB
MD5

73da9c06b5f9257e6c293022569078f4
SHA1

04e100b43f5aa50f4c9f279660aa9a321144df7b
SHA256

20fd9ba9dfc6d46c59837753725f23ab701bbc4d455c6d32c81e752989dceafd
SHA512

910839250c70c918688a15eb2046ad8d1d0a46a685df507aede2ec4586f7ced3ea7e5d0d7c785fce105e34588f3640fe5a2e616df31b12bcae24eadb2d5fb188
SSDEEP

96:SvWAFy3ozg3l24ENO0OHK+MW6c+AEkDVthcE0:SvbHul24LrHK+MW6vrk9f0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73da9c06b5f9257e6c293022569078f4_JaffaCakes118

Files

73da9c06b5f9257e6c293022569078f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

213db1a853634735007f846366ad1a48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

miktex-ovf2ovp-3

MiKTeX_OVF2OVP

msvcr80

__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_adjust_fdiv
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_lock

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ