aca3fc933ae1ed76774f179eed5457e3_JaffaCakes118 | Triage

Sharing

General

Target

aca3fc933ae1ed76774f179eed5457e3_JaffaCakes118
Size

187KB
MD5

aca3fc933ae1ed76774f179eed5457e3
SHA1

bd1df9ce16ba75b6c6ffd6a63746d37ff0bd34b2
SHA256

492c576f452329f0806a2460e9da89cf8e596e593d87beb991ecdacaac0563cf
SHA512

35bacc7db21a51f34dfc561e79d1dc7ab20da8e1522fc5367590cb09a62b1e2ddf80cecc386cd198ea0207cf0894516412667a05b862abdff19897403fb9ecbd
SSDEEP

3072:RwDaFQ0DmaOKjcB86nXloQGRnagHnbaYBp0ktuh20wxrZ9Gg1YUpjKKX/WIYr:1aYM9Xl8RLHnb5Bp/uuV1Z/Mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca3fc933ae1ed76774f179eed5457e3_JaffaCakes118

Files

aca3fc933ae1ed76774f179eed5457e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bdf3d9bbfd54a5049e9c556290ee3b80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\MyNewFolder\IsTest\Document\Work.exe

Imports

msvcrt

wcsncpy
_controlfp
__set_app_type
localtime
__p__fmode
__p__commode
mbstowcs
_amsg_exit
_initterm
atol
_ismbblead
fgets
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
swprintf

kernel32

DeleteAtom
SetFileTime
ConnectNamedPipe
SetupComm
GetCommandLineW
IsBadReadPtr
IsBadStringPtrW
HeapWalk
IsDBCSLeadByteEx
GetLocalTime
MoveFileExA
SetFileAttributesA

Exports

Exports

_RegisterDeviceNotificationARegisterDeviceNotificationA@0
_RegisterDeviceNotification_A@0

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ