a8043f7740aaf2b1a82b714515540012_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8043f7740aaf2b1a82b714515540012_JaffaCakes118
Size

199KB
MD5

a8043f7740aaf2b1a82b714515540012
SHA1

714c76fd689d90b867c4fe98997dd72f18560e5c
SHA256

9abb71f05e022b59eaab5657f4673676778f560949bcc51e6c057c0a83cde88c
SHA512

271f3ff769bafbd06a348d62854c7a497a65fd76b68767a3659562bb584c78fac806a8c2e68b6512d5f4b6bf039da23f7286d7c88d7ae958dbc326f6ddcce83a
SSDEEP

3072:MQiw3v+5znACGTvi8IeN0GNPkJ+ydiSo4tC3G1fy0OGhbqB:MN4ikr2GNkJ+nkv52

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8043f7740aaf2b1a82b714515540012_JaffaCakes118

Files

a8043f7740aaf2b1a82b714515540012_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b71d57cc2ff873f48b0ebbf380247376

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics
CharNextA
GetDesktopWindow
GetDC

kernel32

GetStartupInfoA
GetConsoleOutputCP
GetCurrentProcessId
lstrcmpA
GetTickCount
MulDiv
GetModuleHandleA
GetWindowsDirectoryA
GetOEMCP
Sleep
GetCurrentThread
GetUserDefaultLangID
DeleteFileW
lstrlenA
GetACP
QueryPerformanceCounter
DeleteFileA
SetLastError
GlobalFindAtomA
lstrcmpiA
GetVersion
GetCommandLineW
lstrcmpiW
SetCurrentDirectoryA
GetCurrentProcess
CopyFileA
GetCommandLineA
GetProcessHeap
lstrlenW
GetCurrentThreadId
IsDebuggerPresent
GlobalFindAtomW
GetModuleHandleW
VirtualAlloc
LoadLibraryW
GetLastError
GetThreadLocale
GetDriveTypeA
RemoveDirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ