a10e462a3a1da408c2e4dc46c020ebc7_JaffaCakes118 | Triage

Sharing

General

Target

a10e462a3a1da408c2e4dc46c020ebc7_JaffaCakes118
Size

202KB
MD5

a10e462a3a1da408c2e4dc46c020ebc7
SHA1

04428b3d3c849f6d59aa0a023266d9343e8ac2a2
SHA256

4370eb279ee2d38bf664ef5bb3ee1c44ca9bc661581ed7a568e304b8174879af
SHA512

e11c275c8360a14901a189bc88d05cba3ceda34bb10a506087392260814b8e5c38e5f25d17ab039c36c64aa49e3147d38d529938b67836b70c724c8e4bdca248
SSDEEP

3072:eZY6faFFXKXkzF/raobgjCW3yygCu3+halHeTcL2eZxilvUnmgkcu:MQFjzNaOK3hgCuOhal+Tbe8UnDP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a10e462a3a1da408c2e4dc46c020ebc7_JaffaCakes118

Files

a10e462a3a1da408c2e4dc46c020ebc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

382053a698675fbb1c6b8351da1fd8cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
CharNextA
GetDC
GetDesktopWindow

kernel32

GetProcessHeap
SetCurrentDirectoryA
SetLastError
GetConsoleOutputCP
GetWindowsDirectoryA
CopyFileA
GetThreadLocale
GetCommandLineA
RemoveDirectoryA
DeleteFileA
GlobalFindAtomW
LoadLibraryW
GetTickCount
GetUserDefaultLangID
IsDebuggerPresent
GetVersion
GetACP
GetDriveTypeA
lstrlenA
GetCurrentThreadId
GetModuleHandleA
GlobalFindAtomA
GetOEMCP
lstrlenW
lstrcmpA
GetCurrentProcessId
GetCurrentProcess
GetModuleHandleW
MulDiv
GetCommandLineW
GetCurrentThread
Sleep
VirtualAlloc
GetStartupInfoA
QueryPerformanceCounter
GetLastError
lstrcmpiA
lstrcmpiW
DeleteFileW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ