b114a26b1249e8a8ba52c82f51884448_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b114a26b1249e8a8ba52c82f51884448_JaffaCakes118
Size

782KB
MD5

b114a26b1249e8a8ba52c82f51884448
SHA1

7e05ec51fd2f24207f311ee81da4422dd80e2f8b
SHA256

6d2c5a5aea9fb74f90deec16e608aa4db8fdf8dcf0f8fb3e335d9667ebe5e8fa
SHA512

da12ee3cc58ce498d1a3f01dd32acb15ca2df5d8cc6ca02513b481f90d229b1cfce646d85b173f13119d6f59edee52cc064cd33caceabbf81fb0c7cca4c6f64a
SSDEEP

24576:8rXIBpaNjb1XRufFFFFXcu4dlrCWoXJNgyzx/wWN:8rqaNb1XE3F4+WsDdxlN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b114a26b1249e8a8ba52c82f51884448_JaffaCakes118

Files

b114a26b1249e8a8ba52c82f51884448_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d8227d57e8ec0542b6e196308dbd8320

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
GetStartupInfoA
RtlUnwind
GetVolumePathNameW
LCMapStringA
FoldStringW
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP

msvcrt

_initterm
__wgetmainargs
memset
asin
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
__dllonexit
_onexit
_wcmdln
memcpy

msimg32

TransparentBlt

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ