d2b1218ad4c72c72d9727d4cf86df87e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2b1218ad4c72c72d9727d4cf86df87e_JaffaCakes118
Size

45KB
MD5

d2b1218ad4c72c72d9727d4cf86df87e
SHA1

f2c477335ecced12b81abcb1fae0fc677596bb8c
SHA256

cc54080a607629c22c38a35e95fd2b64530d2e7b91aca1183f8870dfbd8444c5
SHA512

68bacbf22d9d65c77c9723d72e1bd444ffe3e1f5c066f0b6857cdf23b8fd0838e1d58c30895b736d98b1a1d186a81e910d629fbf98fcf814a8ad86c831859a43
SSDEEP

768:ZjmH6kv8OC4cUlZt/10Op8KIldxqJoaJQYKGXZ:ZSH/+TQZtN0jKu+rJQ7G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2b1218ad4c72c72d9727d4cf86df87e_JaffaCakes118

Files

d2b1218ad4c72c72d9727d4cf86df87e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

36e76336f8d090226f1b00e7bb82bd90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
memcpy
_except_handler3
_mbscpy
__p__fmode
_ismbbalnum
_exit
__setusermatherr
_safe_fdivr
_ismbcprint
_wfdopen
iswcntrl
__set_app_type
_initterm
_adjust_fdiv
_adj_fpatan
__getmainargs
__p__commode
wcscoll
iswdigit
_assert
exit
_fstati64
_mbslwr
_controlfp
_acmdln
strncpy
_aligned_realloc
_wcsset

kernel32

SetProcessWorkingSetSize
WriteConsoleA
FileTimeToSystemTime
CreateEventA
GetVersionExA
InterlockedDecrement
GetModuleFileNameA
GetComputerNameW
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetLocaleInfoA
FileTimeToLocalFileTime
HeapAlloc
GetCPInfo
HeapCreate

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ