ad5630f58a17b7e1a885f1621eec867d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad5630f58a17b7e1a885f1621eec867d_JaffaCakes118
Size

180KB
MD5

ad5630f58a17b7e1a885f1621eec867d
SHA1

7eadbd4807afa4ef3ad4084e55c9517bf77393b5
SHA256

8dad492a30782a795f289ac07a526560d2327e3d32242154331653f4fc6f9002
SHA512

ae5ce4212d2ce77429698a6b857cb5d9ead369e5ebe04e5e62dbc6b4bf58389726bd325ec00a5b74b2b6811311ca2a8087959531e3df4d22f4fd146dce0ff6e5
SSDEEP

3072:cQoFF0U3wBD2NFz9WQvUNR6Zcg44tcvPS2eVt5B:ML3wBD2NFwQvm6qOiS2aB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5630f58a17b7e1a885f1621eec867d_JaffaCakes118

Files

ad5630f58a17b7e1a885f1621eec867d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fa24ed067a90aa72343417944953e84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\build\2.2.1.infra\src\OOF680_m18\desktop\wntmsci10.pro\bin\smath.pdb

Imports

msvcr71

_exit
_XcptFilter
_cexit
exit
_wcmdln
_amsg_exit
__wgetmainargs
_initterm
_c_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
wcslen
wcscpy
wcscat
_wsplitpath
__setusermatherr
_wmakepath

uwinapi

CommandLineToArgvW
GetModuleFileNameW
CreateProcessW
FormatMessageW
MessageBoxW
GetStartupInfoW

kernel32

GetLastError
CloseHandle
GetCommandLineW
GetModuleHandleA
LocalFree

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE