d331790f27924b01270ebca20afa4f1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d331790f27924b01270ebca20afa4f1d_JaffaCakes118
Size

73KB
MD5

d331790f27924b01270ebca20afa4f1d
SHA1

04a2f01c6199b1cee1c05ac27a2986903e75f552
SHA256

2f74ea552e10676ad30037757c658f97a15aa63902d7665f9bf2f663e649c3ec
SHA512

1b63a996d58e7b4e92ab19db7ff64acf07a198b181e02b5e3893a0b6aa86dcb657df7acf1d6f2017845a8965a11a6c8136a3ca1a6e1a6e9b4c9f9aa3a10d1678
SSDEEP

1536:vt5DzpFjuPD6Xylr/ZjWV8IzX41hZ2SdIjC2g3jY3IEssm:l5zvuT/ZjWhX41hXIRg3jYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d331790f27924b01270ebca20afa4f1d_JaffaCakes118

Files

d331790f27924b01270ebca20afa4f1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d4aa213b46efb4bd17fa5b2eb8ca60f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_errno
asin
_unlock
__dllonexit
_lock
_onexit

kernel32

GetThreadPriorityBoost
SetCurrentDirectoryW
SetEnvironmentVariableW
GetAtomNameW
GetShortPathNameW
SetErrorMode
CompareStringA

gdiplus

GdipGetImageThumbnail

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ