973372bab2e36353417120f4e852719f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

973372bab2e36353417120f4e852719f_JaffaCakes118
Size

23KB
MD5

973372bab2e36353417120f4e852719f
SHA1

9bfa3f88170f6ed030081d5dc89b311cf7676863
SHA256

e5bdc50e640868966c8f5f5f8095ec051f70a6fda86bf7d0b27e58cda127604e
SHA512

8cddf7993779a9af0f2e72a8eaec952e97b2ed3d7e352f639dbc12b8770ff3c80f38c9937681fd7b53dc2056a36d73019de5f70cc4f862860536ecb495f70406
SSDEEP

192:JhaT5YhwP1oynA3bWBm7EA/WvU0JOXtWMR4ghf9AQuT61oys:J0um1arhsyWMR4wT861q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
973372bab2e36353417120f4e852719f_JaffaCakes118

Files

973372bab2e36353417120f4e852719f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ae28e68656b5fc7a37b4da1053643e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
SetFilePointer
FreeResource
GetLocalTime
CreateFileA
LoadResource
FindResourceA
GetProcAddress
LoadLibraryA
DeleteFileA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA

user32

wsprintfA

msvcrt

memset
??2@YAPAXI@Z
strlen
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 4KB - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ