abb8585667b39d94dd227fd32c41e2e2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abb8585667b39d94dd227fd32c41e2e2_JaffaCakes118
Size

27KB
MD5

abb8585667b39d94dd227fd32c41e2e2
SHA1

6dcea3542b9efe5cbeae1b045449e26de08644ba
SHA256

6085deb13cb24008d15089d545b3d0cc266e6ed970cb44c578880b33f0d49d22
SHA512

a1717894888fdd7f12c785ec386cfef505771f7072666cb4202927e4624e9264cd949838d7ad63f6c96b2ae5ad3fe65711e02beab117f73eee9bfc11b3eb29fc
SSDEEP

384:RwknmC21i45H1MLUU496jqDseOeNO7/TNl/4oLIGf:Xnx215F1MLUU6Z7OeNOf4oLI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb8585667b39d94dd227fd32c41e2e2_JaffaCakes118

Files

abb8585667b39d94dd227fd32c41e2e2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2a300e57823907a45b26a472b43a19e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
_setsystime
feof
_exit
exit
_controlfp
_mbslwr
__p__fmode
_except_handler3
_XcptFilter
_ismbbkpunct
_initterm
memcpy
__setusermatherr
__p__commode
_control87
_adjust_fdiv
_mbschr
__set_app_type
_set_error_mode
_wstrtime
_wexecvp
free
_fileinfo
__getmainargs

kernel32

MapViewOfFile
GetStartupInfoA
SetLastError
GetProcAddress
DuplicateHandle
TlsAlloc
GetLastError
GetModuleHandleA
WriteConsoleA
LCMapStringW
GetTimeFormatA
GetFileAttributesA
FreeLibrary

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ