ac2ad4318f4ced3a75777e79b2bc13e4_JaffaCakes118 | Triage

Sharing

General

Target

ac2ad4318f4ced3a75777e79b2bc13e4_JaffaCakes118
Size

236KB
MD5

ac2ad4318f4ced3a75777e79b2bc13e4
SHA1

52308a5838f2ab121652d8ea6bb672e77703f350
SHA256

0e43abb60014f2289f13d0aafcee5c6de24ea7d33f7dfb19540272458cf610a1
SHA512

0f1e9b0522f9f3ea167800a5e07daf79bf58924f272b8dae8de641fefcf87e9a2b27941c49870a4275f30a44a43ff9f0c1466f66539c0d2734398e09c7f70832
SSDEEP

3072:DEeUDRZsTlZxD3/+x6TTzvbrLobtjmtTBfKlDzn:fsREB/+x23vbXobpmtTBClDzn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac2ad4318f4ced3a75777e79b2bc13e4_JaffaCakes118

Files

ac2ad4318f4ced3a75777e79b2bc13e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6f6e45df710e301fadaf2336979d2aa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetFileTime
GetVersionExA
HeapUnlock
CloseHandle
GlobalLock
GetFileAttributesA
WaitNamedPipeA
GetDriveTypeA
TlsGetValue
SleepEx
GetTickCount
SetEvent
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

mfc42

ord823

msvcrt

_ftol
_CxxThrowException
memcpy
malloc
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
__CxxFrameHandler
_purecall

Sections

.text
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ