b2b2438718d3f33da97841a47715f8de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2b2438718d3f33da97841a47715f8de_JaffaCakes118
Size

140KB
MD5

b2b2438718d3f33da97841a47715f8de
SHA1

e510fa82f38c4a6152b8f6122dbb47f64a6dbf45
SHA256

48bf28d059310194538b5ceb8a07a9262cfbe2e997297461bb2d959226046ddc
SHA512

ddcc21d499dfe34c82bad245600f368068ef113026bc25a1b9ac0fc69221b56f2a17035ac775d9fcc158ff9f8cc33c4e9ced30a13247ff21a6a905d4ecb05f5f
SSDEEP

3072:Q0jZGamIjWmqbnhXm28xgYv2I5c2wK7AjG7:XGfnhXmP7sje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2b2438718d3f33da97841a47715f8de_JaffaCakes118

Files

b2b2438718d3f33da97841a47715f8de_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e9dc5a28a1d12f9e39ad4b22cb619338

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
GetFileTime
SetLastError
GetCommandLineA
CloseHandle
HeapCreate
GetVersion
HeapAlloc
GetModuleHandleW
InitializeCriticalSection
GetStartupInfoA
TerminateProcess
GetModuleHandleA
FlushFileBuffers
SetFilePointer

msvcrt

__getmainargs
exit
_isctype
_acmdln
_initterm
_setjmp3
_XcptFilter
_ftime64
_cexit
__setusermatherr
freopen
_atodbl
_controlfp
_except_handler3
memcpy
__p__fmode
mktime
asin
_exit
__set_app_type
__p__commode
system
_wfindfirst
_adjust_fdiv
_cwprintf

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ