86382811dd2d060b0b3ad11c6ef78f7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86382811dd2d060b0b3ad11c6ef78f7d_JaffaCakes118
Size

73KB
MD5

86382811dd2d060b0b3ad11c6ef78f7d
SHA1

0577d70339c5475348496e70b392de7299541d2f
SHA256

0a4dbdc1ea50d849096c73a1c765b5c10956e18e5f4dbcbb92d59209b5b303c8
SHA512

1aa65d0aad436f45862c7912ea187d2c6751c2cf49b90c34475fd21eb3cfbdc0e82a138be0249b776afabb8ed9b2434cbeda22466d71f54825782a2e5a2b2335
SSDEEP

1536:cJ3ezhiRSNm1ZZ1Fwxcb7i5i4pho0waDQrp8+p8PLLtaK:cJuzhvgZZ1H7wH7yaD+p/gaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86382811dd2d060b0b3ad11c6ef78f7d_JaffaCakes118

Files

86382811dd2d060b0b3ad11c6ef78f7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

efcf8c179b634be486e0956724259f86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_wcsnicmp
asin
wcscspn
wcschr
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
??2@YAPAXI@Z

kernel32

GetUserDefaultLCID
TlsFree
TlsAlloc
VerLanguageNameW
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
lstrlenW
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LoadLibraryExA
CompareStringW

ddraw

DirectDrawCreateEx
DirectDrawCreate

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ