a0abf631f21e0a3379cdfec1bb565ae1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0abf631f21e0a3379cdfec1bb565ae1_JaffaCakes118
Size

528KB
MD5

a0abf631f21e0a3379cdfec1bb565ae1
SHA1

7654c4962faa0697517f45e8584a9e2c2198cf3f
SHA256

73f3363fb2ef653fa9db65cc8140c8f573f48dd5da312a00355b322385243215
SHA512

cdf195319f90a33a4e769bc4d9cb3fa2ad247b002dd75a255dd1b362e75b9dca203d1ee1aa82e83b9537834b3ea294839db3c92505009d27735f8185d496f4cc
SSDEEP

12288:xdAOa63iobZSn9+/SdqHAECYUvCU4vtdsZ0:DAiioEnlATs9Utd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0abf631f21e0a3379cdfec1bb565ae1_JaffaCakes118

Files

a0abf631f21e0a3379cdfec1bb565ae1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3497d79f7018c6b99d65b01f799d02a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

_unlock
__dllonexit
_lock
__set_app_type
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_onexit
calloc

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrcpyA
GetModuleHandleA
GetProcAddress
IsDebuggerPresent

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.DiCjS
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 519KB - Virtual size: 518KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ