ac0f0a71ff8b1ecbea43919c6ee0d488_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac0f0a71ff8b1ecbea43919c6ee0d488_JaffaCakes118
Size

315KB
MD5

ac0f0a71ff8b1ecbea43919c6ee0d488
SHA1

f3cd3aaf4ecaddf9ad47a9ddb5f7075fbb3d1f65
SHA256

d669ad3735f1b0058ef35663d3bf53ca6770d541f9b67debde425168a58f901d
SHA512

1e2b9840f9515a934220228bf9cc638aaf89fa8a536d3480cf6f87dd3dab2d66e556c47d15ce0fa591ba34f34245b9075f70b9799cd8383e5546f2fd48e53e94
SSDEEP

6144:HfdZhOVyFkajb+6kGP7XRuyIURotfBlTPUMla+m2:b8AFnBrP7XhotfBOyk2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac0f0a71ff8b1ecbea43919c6ee0d488_JaffaCakes118

Files

ac0f0a71ff8b1ecbea43919c6ee0d488_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81eb38aa599ee62619f501039926550f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
FreeEnvironmentStringsW
GetFileType
ExitProcess
TlsGetValue
WriteFile
GetConsoleMode
GetCommandLineW
CreateFileW
UnhandledExceptionFilter
InitializeCriticalSection
GetCurrentProcessId
GetCPInfo
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetTickCount
GetSystemDefaultLangID
GetSystemDefaultLCID
GetCommandLineA
GetVersion
GetLastError
GetCurrentThreadId
GetUserDefaultLCID
GetModuleHandleW
GetUserDefaultLangID
HeapAlloc
GetProcessHeap
lstrlenA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
_strcmpi

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ