c97dcc809abecb0d77e86870d4ad97c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c97dcc809abecb0d77e86870d4ad97c5_JaffaCakes118
Size

60KB
MD5

c97dcc809abecb0d77e86870d4ad97c5
SHA1

173f49cf2a03084668475a648fab3a09d02dc104
SHA256

91331cb6ba6e897bd337f4ac88a9e48a7a70164a9ab4a4d282c7594d29dd39e2
SHA512

162dc5965d6626da2b0264847e04920258b2721ae8f072d7fb8b7de1558daf0ff1ab598d0e0db1b344343d90f7fc1259bdbc3c0cc6afd76f0f33ee9ea689c6db
SSDEEP

384:mqUYFpC9TmSVCb6LxaG+y2JpHWewheWcuFnFml/Sy3d3GB8J0sgnBRgy26Vw5KRe:mOkmW53SpstqSeHKfRgy9UKK1mk3q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c97dcc809abecb0d77e86870d4ad97c5_JaffaCakes118

Files

c97dcc809abecb0d77e86870d4ad97c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0053b2b851447031ad7aab8f5256af62

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

outllib

RenInitInstance@12
FMessageLoop@12
RenExitInstance@0

kernel32

WideCharToMultiByte
GetEnvironmentStringsW
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
VirtualAlloc
GetProcAddress
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE