a4de17ca2090f0e63ffbc2d4b22678cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4de17ca2090f0e63ffbc2d4b22678cc_JaffaCakes118
Size

47KB
MD5

a4de17ca2090f0e63ffbc2d4b22678cc
SHA1

b93fccf13075a2ae2ec2072f1fc3aee97c984e93
SHA256

00f9b6c56fb5019df9cba64517c0e7f6a97837effe63ebb1fc76855b119d14d8
SHA512

34a879a25d643c3a01a2bfd71dfa1d93ccdfd6a73ba4281a3f019f70a43bd1c957214d13641bc63f1ddf4caf3892f4aa859effdad6768778458d654fbcdd858b
SSDEEP

768:Htd+t6gK6Gxb6Rh1FocpJHUan2upwHOYTlbRqbX6NNKCjI9szt:HtyG6U6R7Fln23O4nqb6TKiIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4de17ca2090f0e63ffbc2d4b22678cc_JaffaCakes118

Files

a4de17ca2090f0e63ffbc2d4b22678cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

833d7306a9c3cb9f31a38d6f9680b4bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetEnvironmentVariableA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ