a62925bb09dedaadfe5114226a8fa185_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a62925bb09dedaadfe5114226a8fa185_JaffaCakes118
Size

30KB
MD5

a62925bb09dedaadfe5114226a8fa185
SHA1

7fb32d7d1a4bb7df1dec2a7586624fe8e1bfbb64
SHA256

131df1472eb61713429e78404195cc56685aad11dbce3eeb81ff92d9f068bf5c
SHA512

46b7c9586f685aef1f784f01213aeafbc5cf0ce229561303cf93d402a6b1983681324a57af524501031f29260c8ceb730ac07d5a3c8b637526a398d1cbac2e0c
SSDEEP

384:6+Ojg3wSNnxpP+KvWSJw/zRwxFaR/YKPaHglUq36rJxo:3OWwSND+TSJuzRwxFaBSHdq36rJxo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a62925bb09dedaadfe5114226a8fa185_JaffaCakes118

Files

a62925bb09dedaadfe5114226a8fa185_JaffaCakes118
.exe windows:1 windows x86 arch:x86

057c345994cc9a1f44f8060936f7a8bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_exit
_acmdln
__getmainargs
_ftime64
_ecvt
_initterm
_except_handler3
_getch
__p__fmode
memcpy
_XcptFilter
_putws
_adjust_fdiv
wcschr
_wunlink
__setusermatherr
_controlfp
_winver
__p__commode
exit
_pctype
setvbuf

kernel32

GetStartupInfoA
VirtualQueryEx
GetCommandLineW
LCMapStringA
HeapAlloc
IsBadReadPtr
TerminateThread
CreateEventW
TerminateProcess
HeapCreate
GlobalMemoryStatus
GetModuleHandleA
GetEnvironmentVariableA
GlobalAlloc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ