b9a71dcc512dce46b46b5faf626e784d_JaffaCakes118 | Triage

Sharing

General

Target

b9a71dcc512dce46b46b5faf626e784d_JaffaCakes118
Size

184KB
MD5

b9a71dcc512dce46b46b5faf626e784d
SHA1

12d4e2da3e8cc3ef09129ac7cf10678293d3cff1
SHA256

f4baaf59c5cf63669d63519e30c84f13f89b597328eedf3e670c12c10a1a8e6a
SHA512

30ce0186f3f7aeadcb4e353e918f43cd459d4e3692a4e28580f034a77e98bf39a59b24108d44721f173b09077f48be706fa222272933404d1d6b6bae68d7001a
SSDEEP

3072:SjeSuZX2SOIP16S8frDLA5htTCly7QgOm6gBro7ussy4EPs+Y7:CeT4g16SqfLA5SwMm6aMissyqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a71dcc512dce46b46b5faf626e784d_JaffaCakes118

Files

b9a71dcc512dce46b46b5faf626e784d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

006612f9fc275a62246cbe82fa6e8c0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__getmainargs
wcscpy
__setusermatherr
strftime
memcpy
__p__commode
_XcptFilter
exit
_acmdln
_getcwd
_wspawnvpe
_adjust_fdiv
_getch
_exit
__p__fmode
_initterm
_controlfp
__set_app_type
wcstok

kernel32

GetConsoleOutputCP
GetProcessAffinityMask
GetVersion
SetLastError
InitializeCriticalSection
GetStartupInfoA
Module32First
TlsGetValue
HeapCreate
VirtualFree
GetModuleHandleA
HeapAlloc
VirtualQueryEx

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ