972c89c5114fae66595e5d3e3817e746_JaffaCakes118 | Triage

Sharing

General

Target

972c89c5114fae66595e5d3e3817e746_JaffaCakes118
Size

68KB
MD5

972c89c5114fae66595e5d3e3817e746
SHA1

80a5c4b2d6059761966d62c72f4b519d2e2e3c38
SHA256

a423bd6271b5c8a6a07636fb23951518840e0d4d4f506925620b73d256390d95
SHA512

070f1ab5068675de0293587c7cc844d3d5391f79129283bcc0e2973493ee516bf83b8e8ccf6f38ed9f5320238472834a5585c011cd87d1e03fd0053879ae94e2
SSDEEP

1536:crMQMY3w/UR8JP8zCa/LFjD9eIg+G7cf0jABBweS7:cS9UR8JP8zC8LFHXtNBqd7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
972c89c5114fae66595e5d3e3817e746_JaffaCakes118

Files

972c89c5114fae66595e5d3e3817e746_JaffaCakes118
.exe windows:1 windows x86 arch:x86

bf282657368f0b04e9215096fc2efd48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
LockResource
InterlockedIncrement
GetModuleHandleA
GetConsoleCP
HeapCreate
IsDebuggerPresent
GetStartupInfoA
HeapAlloc
LeaveCriticalSection
GetStringTypeW

msvcrt

__p__fmode
_exit
_mbsicoll
_acmdln
getwchar
_controlfp
memcpy
strtol
_wctime64
_heapused
_initterm
_tolower
_lrotl
__setusermatherr
__set_app_type
putwchar
_adjust_fdiv
_except_handler3
abs
fwprintf
_getdcwd
__getmainargs
__p__commode
exit
_XcptFilter

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ