d1544082b3e36a1101ef4ef7013f23af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1544082b3e36a1101ef4ef7013f23af_JaffaCakes118
Size

100KB
MD5

d1544082b3e36a1101ef4ef7013f23af
SHA1

55b91bdecbc452c45a00dfeb140d02b1bf2da1e0
SHA256

93866a92b357a45a7fce3226567baede0144cb1a3097137d0117d04522be9ae2
SHA512

d67c9a886eca7a1e72090ca7cf1eb4b152f3bdcd5e127e25b69ffbc607316d16a71a06eff829ab9b792c307f506023d40adb2c20e3f3ae8ffd63307ff19e6901
SSDEEP

1536:NsglBPD9QMpaJcV2cUxSe3NKobvqOvwVZuN5zYXwDVdGBizDSCJjsiquNDUS/AKf:NrJbl2FSe9hkIGBIjxqE1/sHxoxvoKb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1544082b3e36a1101ef4ef7013f23af_JaffaCakes118

Files

d1544082b3e36a1101ef4ef7013f23af_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2cafc5d578636b8e9cca4b44e0370bd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mclmcrrt79

mclGetID_proxy
mclInitializeApplication_proxy
mclInitializeComponentInstanceWithEmbeddedCTF_proxy
mclMain_proxy
mclRunMain_proxy
mclSetCmdLineUserData_proxy
mclTerminateApplication_proxy
mclTerminateInstance_proxy
mclWaitForFiguresToDie_proxy
mclWrite_proxy
mclmcrInitialize_proxy
separatePathName_proxy

kernel32

ExitProcess
GetStartupInfoA
RtlUnwind

user32

MessageBoxA

msvcrt

__argv
__getmainargs
_cexit
_environ
_exit
_fdopen
_open_osfhandle
_setmode
exit
fclose
raise
setbuf
signal
sprintf
strlen
__argc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE