b615d1b5812309d1acdeeaee2f22a811_JaffaCakes118 | Triage

Sharing

General

Target

b615d1b5812309d1acdeeaee2f22a811_JaffaCakes118
Size

143KB
MD5

b615d1b5812309d1acdeeaee2f22a811
SHA1

4cf3935d82d3f1a57025700633aeb6f97e4d46f7
SHA256

abfd359cb67aeb6329bcaba5915a424cdc92f981a886a4dc9b9ad6df9839816c
SHA512

e925f7cc9520d8b630324e320344af7314656476d5c599fee6eac518b0c04578b1d9d856a2e6606775a2bfff7e1023471dd66e63444f1e40edd259d6d332ada8
SSDEEP

1536:+QHhU7YszOCfOONpQEVM0xv737FxnnC3XuQs5tbfme6rbTRo8VDcH:+QHOzdfTpQEVxXvC3XrstbmeyTRoxH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b615d1b5812309d1acdeeaee2f22a811_JaffaCakes118

Files

b615d1b5812309d1acdeeaee2f22a811_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2da2649a7db8136ecaae9d8b60997ab5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
InterlockedExchange
GetModuleHandleA
IsBadStringPtrA
GetStartupInfoA
GetLocaleInfoA
lstrcpynA
ResetEvent
GlobalUnlock
DeleteFileA
HeapAlloc
SetLastError
OpenEventA
GetOEMCP
GetCommandLineA
LoadLibraryW

msvcrt

_adj_fprem1
__p__fmode
perror
__p__commode
exit
_mbsset
wcstoul
_adjust_fdiv
__setusermatherr
_heapused
_mbscat
memcpy
_initterm
_XcptFilter
_exit
_acmdln
setvbuf
_except_handler3
_controlfp
_wsopen
_mbsnbcoll
_inpw
__set_app_type
wcsrchr
__getmainargs

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ