acbb5affb54e2ef6ec12836dba24df97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acbb5affb54e2ef6ec12836dba24df97_JaffaCakes118
Size

37KB
MD5

acbb5affb54e2ef6ec12836dba24df97
SHA1

8c2ca05064a2b04ffbee65f8cc299c790584be37
SHA256

ad5276bc7634ba50dff17c35d9fc8f684c4d3538ad8a19cc14fe9643a3945a9c
SHA512

c44b0dd43374452ca31d095ae88d8bf9ddb26bf614edde01247c367fd3bbc49a2f6960318fed640e6fd72d8b7d3bae19d4c5be5a924b35d660ea1858070d2c42
SSDEEP

768:ZjpjIDoQYTqolWVq40yx23bEaHb9kO+YVGTLChDo3Xw:TyZolWWg2l9IIgw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acbb5affb54e2ef6ec12836dba24df97_JaffaCakes118

Files

acbb5affb54e2ef6ec12836dba24df97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1dbd796f86eb7d06397850efa8db337a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
GlobalReAlloc
FreeEnvironmentStringsW
GetVersionExA
GetSystemDirectoryA
TlsGetValue
QueryPerformanceCounter
RtlUnwind
lstrcpyA
MapViewOfFile
OutputDebugStringA
FileTimeToLocalFileTime
IsDebuggerPresent
OpenProcess
DuplicateHandle
lstrcmpA
GetThreadContext
GetExitCodeThread
ExitProcess
WideCharToMultiByte
InterlockedExchange
DeleteFileA
GetConsoleCP
GetEnvironmentStringsW
VirtualAlloc
GetModuleHandleA
SetFilePointer

msvcrt

_waccess
strrchr
_wfopen
_beginthread
fopen
strcpy
strstr
time
wcsrchr
fgets
_wcsnicmp

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ