782cbf0833ff11b6cab8d88cb83b5ab8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

782cbf0833ff11b6cab8d88cb83b5ab8_JaffaCakes118
Size

141KB
MD5

782cbf0833ff11b6cab8d88cb83b5ab8
SHA1

b64dccc87c7928c9d472a0deee86cae40d762c12
SHA256

066a1646a9c24c1f6700c1d2987c240ecb24ba3f65c3e3bd0dc7d6f780f510be
SHA512

7d831784d683c53f46d0dbf025c3f9f6b7aa412b732659741eed4fc30da0dbc6135a7e1c7b1677cf4d940db59d59ec0cfd66f00bbc8e2e6803a562977c42937b
SSDEEP

1536:PHtOugGku/QJ5QirpfUBT/IU7E3wcYTHbYgIb0y5zTJ7u:PHt/ku85QirpMBM/0Yvwy6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
782cbf0833ff11b6cab8d88cb83b5ab8_JaffaCakes118

Files

782cbf0833ff11b6cab8d88cb83b5ab8_JaffaCakes118
.exe windows:1 windows x86 arch:x86

696cc28a1bdaea8d1cbbf3544f77553c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
exit
wcscpy
_initterm
_fpreset
_unlock
_pctype
_exit
__set_app_type
_fstati64
_except_handler3
_controlfp
_acmdln
__setusermatherr
_adjust_fdiv
_XcptFilter
__getmainargs
_mbslen
memcpy
abort
_findnext
_stati64
__p__fmode

kernel32

HeapCreate
GetModuleHandleA
SetErrorMode
RaiseException
FindClose
LockResource
HeapAlloc
Module32Next
Sleep
GetCommandLineA
LeaveCriticalSection
GetVersion
GlobalAddAtomA
VirtualAlloc
VirtualQueryEx
FreeEnvironmentStringsW
GetStartupInfoA
CreateEventA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ