c75932891e5a817d11f0d285c64e17a3_JaffaCakes118 | Triage

Sharing

General

Target

c75932891e5a817d11f0d285c64e17a3_JaffaCakes118
Size

419KB
MD5

c75932891e5a817d11f0d285c64e17a3
SHA1

52c29e9173be08856b77fbfaf6beedf41a14988a
SHA256

e76022f7d0b18e0b9c2c6bdbcdcd4ca02d7574961e7e04a995e3bf2885b63459
SHA512

ccc1a678e8d5e663295ab25c0c9e5b99704fec02fcf608a6bb3300134a0fdd4f8894f552471acd01bda516dce769f1e772d25679f846ac40a8b1e4c5e544ace2
SSDEEP

6144:TZaQE9qioViBT48tkLsuVv/BfLQnOKoXYXf7ZZziINiU3EVH1MjZPXe55rjpTAWy:UQE94V4415dWgc7rGTUUh1kG5Bp8wrA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c75932891e5a817d11f0d285c64e17a3_JaffaCakes118

Files

c75932891e5a817d11f0d285c64e17a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1afeeddffbe72a5451c007a1b01326b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetLastError
LoadLibraryA
GetCommandLineA
GetVersion
GetSystemTimeAsFileTime
GetModuleHandleA
GetCurrentThreadId
ExitProcess
GetTickCount
GetTimeFormatA
CreateWaitableTimerW
ReadFile
GetNextVDMCommand
GetEnvironmentStringsA
GetSystemWindowsDirectoryA

msvcrt

_wctime
_snwprintf
_beginthread
_wcsnicmp
sprintf
wcsncpy
_wfopen
_strcmpi
_wfullpath
wcscat
fprintf
wcsncat
__setusermatherr
_strnicmp
_acmdln
__dllonexit
time
_wtoi
iswctype
realloc
exit
malloc
wcsncmp
_getcwd
qsort
_controlfp
wcsrchr
abs
strchr
_adjust_fdiv

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.int
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ