76c26220be6731e02956aed1b0359b17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76c26220be6731e02956aed1b0359b17_JaffaCakes118
Size

71KB
MD5

76c26220be6731e02956aed1b0359b17
SHA1

19d6b32e084c073d17b7c196b503ffb3a33844e4
SHA256

8abf13165545d2913fe2c25b410faf77cdd95893337840066f813069c5edfcd9
SHA512

b2877d72e1beadeffdec49d3c5f5d1e9f82bb7ac0fa4ccdf932665c8038d885608f7127bd28e4d6c22e3984a1a52a626ce938681789ec41c42a13b35b3d9b58d
SSDEEP

1536:+gsC/dRtuBF8u+Wc1dd4cmOiMPgylR1KrgAFuNXd+QM5opxK:1/ZuP8FduOiMplR1ogA0FYQM+pxK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76c26220be6731e02956aed1b0359b17_JaffaCakes118

Files

76c26220be6731e02956aed1b0359b17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96681e08aca555d4dbc56cb069c846ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_errno
_initterm
_unlock
__dllonexit
_jn
_lock
_onexit
swscanf
memset
_vsnprintf
_CxxThrowException
towlower
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
toupper
iswctype
wcsrchr
memcpy

kernel32

GetProcessHandleCount
HeapCreate
HeapSize
GetStdHandle
HeapValidate
HeapReAlloc
HeapDestroy
SwitchToThread
DeleteTimerQueueTimer
TryEnterCriticalSection
InitializeCriticalSection
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareFileTime

gdiplus

GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ